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In this Issue 

Light- emitting diodes bright enough for outdoor appffcattons in bright sunlight — 
automobile taiE lights, for example — have been a long-sought goal of LED re- 
search, HP's latest LEDs, described in the article on page 6. should meet the 
needs of many outdoor applications. Made from aluminum indium gallium phos- 
phide iAllnGsP), they surpass the brightness of any previously available visible 
LEDs and come in a range of colors from red-orange to green. Technically, they 
are double-heterostructure LEDs on an absorbing substrate and are grown by 
means of a technique called organometallic vapor phase epitaxy, which has 
been used for producing semiconductor laser diodes but not for the mass pro- 
duction of LEDs, In addition to the technical details of the new LEDs, the article 
provides a history of LED material and structure development. 

Lefs say you have a computing network In which users need to share resources. A user needs to move b 
compute job to a remote machine to free local compute cycles or access remote applications. You would 
like your computers to be equally loaded, and you would like to make remote access as automated as 
possible. Also, you want disabled machines to be automahcally avoided. HP Task Broker (see page 151 is 
B software tool that distributes applications among servers efficiently and transparently. When a user 
requests an application or service, HP Task Broker sends a message to all servers, requesting bids for 
providing the service requested. Each server returns its "affinity value," or bid, for the service, and the 
server with the highest value is selected. Tasks are distributed at the application level rather than the 
procedure level, so no modifications are required to any application. Besides load balancing and increased 
availability, the benefits of HP Task Broker include multiple-vendor interoperability, easier network 
upgrade bility, and reduced costs. 

Real-time systems, unlike timesharing and batch systems, must respond rapidly to real-world events and 
therefore require special algorithms to manage system resources. The HP-RT operating system is the 
result of porting an existing operating system to the HP 9000 Model 742rt board-level real-time computer 
The HP-RT kernel implementation, including the concepts of threads, counting semaphores, and priority- 
inheritance semaphores, is described in the article on page 23. The article on page 31 discusses the 
handling of interrupts in HP-RT and tells how the HP PA-RISC architecture of the Model 742rt affected 
the operating system design. 

The HP Tsutsuji logic synthesis system (page 38) takes logic designs expressed as block diagrams and 

transforms them into netJist files that gate-array manufacturers can use to produce application-specific 
integrated circuits (ASICsl, In many applications, the system reduces the time required to design an ASIC 
by a factor often or more. Tsutsuji was developed jointly by HP Laboratories and the Yokogawa- Hewlett- 
Packard Design Systems Laboratory in Kurume, Japan. Because the World Azalea Congress was being 
held in Kurume when the project began, Tsutsuji — the Japanese word for azalea — was chosen as the 
name of the system. Currently, Tsutsuji is only being marketed in Japan. The article covers its architecture, 
its operation, and several applicatipos, 
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A desktop scanner digitizes photographs, documents, drawings, and three-dimensional objects artd 
sends the information to a computer, usyally for electronic publishing applicBtions. The HP ScanJet lie 
scanner (page 52} is a 400-dot-per-inch flatbed scanner that has black and white, color, and optical 
character recognition capahilrties- Using an HP-developed color separator design, it provides fast, 
single-scan, 24-bit color image scanning. The anjcfe describes the color separator design and discuses 
the challenge of trying to duplicate human vision so that colors look the same in all media. 

Issues in the design of a workstation computer for industrial automation applications include serviceabilrty, 
input/output capabilities, support, reliabiiity, graphics, front-to-back reversibility, mounting options, form 
factor, airflow management, acoustics, and modularity. How these issues are addressed by the mechanical 
design of the HP 9000 Models 7451 and 747i entry-level industrial workstations is the subject of the article 
on page 62. 

Franco Canestri is an application and technical support specialist for H P cardiology products in Europe. 
He also continues the medical laser research he began as an assistant fellow at the National Cancer 
Institute of Milan, focusing on orthopedic surgery applications. In the paper on page BB, he describes 
recent work on an algorithm for reat-ti me surgical laser beam control using HP 9000 computers. 

The final three papers In this issue are from the 1992 HP Software Engineering Productivity Conference. 
^ On page 73 is a description of a defect management system created for software and firmware devel- 
opment at two HP divisions. The system uses a commercial relational database management system. 
^ The C++ language and object-oriented programming offer potential productivity gains, including code 
reuse, but there can be pitfalls. The article on page 85 discusses these as well as some new features of 
the language. ^ In developing real-time software, it may be difficult to go from a structured analysis 
model to a structured design. To help make this transition for HP medical uftrasound software, one HP 
division used a high level design methodology called ADARTS. It's discussed on page 90. 

R.P Dolan 
Editor 



Cover 

This photograph illustrates many of the features of the new HP AllnGaP light- emitting diodes, including 
their range of colors, their package types, their narrow-beam light output, and their brightness when 
viewed head-on. Although we took the picture in the dark, the main applications are daylight-viewatile 
displays and automotive lighting. 



What's Ahead 

Featured in the October issue will be the design of the HP 54720 sampling digitizing oscilloscope family, 
which offers sample rates up to 8 gigasamples per second and bandwidths from 500 megahertz to 2 
gigahertz, the HP E1430A 10-megahertz analog-to-digital converter module, which has liO-dB linearity 
and built-in memory and filter systems, and the HP4396A l.B-gigahertz vector network and spectrum 
analyzer, a combination analyzer with laboratory- quality performance in all functions. 
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High-Efficiency Aluminum Indium 
Gallium Phosphide Light-Emitting 
Diodes 

These devices span the color range from red-orange to green and have the 
highest luminous performance of any visible LED to date. They are 
produced by organometallic vapor phase epitaxy. 

by Rabt^rt M. Fletcher, Chihpiiig Kuo, Timothy D. Osentowski, Jlann Gwo Yu, and \lrginia M, Robbiiis 



Since light-emitting diodes (LEDs) were first introduced 
eanimercially in the late 196(Js, they iiave become a common 
component in virtually evei7 type of con^^iimer anri indiis- 
trial electronic product. LEDs are used in ctigiuU and alpha- 
rni f ti eri c d i ?vp lays, b ar-g rajj h d i s] ) lay s, mni s i in p I e ( ) n/< t f r sta- 
lus indicators. Because ol'fla^ir limited hngbUiess, jjEr>s 
have tended to **wash out" under sunlight conditions mid 
have not gejierally been used for outdoor applications, f Re- 
call die quirk demise ofdigilal walclu'S with LED displays in 
the eaily l!)7()s.| However the intro duel ion ofl}right rcd- 
light'emitting AlGa.'^Ls LEDs hi the mid and late VJSOs pai- 
tially elimijiated tliis diawback. Now, another family of 
LEDs, made from AlInGaP. litis been intioduced. These 
LEDs smpass the hrigbtness of any previous visible LEDs 
and span the color range from icd -orange to gitHni. With this 
breakthrougii in brightness in a tuoaci range of colors, wv 
should see a wide vkiricty of new applicalions for LEDs 
withui the next decade. 

History 

Although the various LED display loid lamp packages are 
familial' to jntmy (for example, the usual LED single-lmnp 
package with its hemispheric til plastic dojue, or the seveu- 
segment tligital display package), tbe diversity t if materials 
used in the chips that go irito ttiese packages is not as famil- 
iar. Fig. 1 sununarizes tt\e \arious sennc<jn<lu€tor materials 
used in LEDs and cbails the evolution of the technology 
over tbe piist 25 years. In die (Igure, I umin mis performance, 
measured in lumens'^' of \isil)le light output per watt of elec- 
trical power input, is plotted over time starting from 1968 
ajiid projected into the mid-1990s. 

The first eommercial LEDs produced in the Late 19fi0s were 
simple p-n homojunction devices made by diffusing Zn int(^ 
GaAsP einlaxial material grown by vapor phttse epitax>^ on a 
GaAs substrate, ^ G;l^P is a direci -bantigap semiconductor 
for compositions where rhe pbosphonis-to-arsenie ratio in 
the crystal lattice is 0.0 to 0.4. Above ij,4, tlie bandgap be- 
comes indirect.'^* The composition of iyiyVt} As and 40% P 
produces red neai-bandgap light at aliout (550 nm. Quantum 
efficiency in a simple bomojimctxan device sach as tiiis is 

' A lumen is s measure of visible Itght i\m tttat lafees into account ttie wavetength ^ensiiivjiy of 
ifie human eye: An LED s output m lumens i^i obtained by multiplying the Tariiant Uuii output of 
ihe tED in watts by the eyes sengriiyity as delined by the Commissfeon Internationale de 
rEclairagefDEl 



low, but these so-called "standard rod" LEi)s were and si ill 
are inexpensive and relatively easy to prodiue. The red 
numeric di.splays in the first pocket calculatoi^ were made 
of slandimi red LEDs. 

At aroimd the same time, GaP epitaxial layers doped witli 
zmc and oxygen and gi< iwn on GaP substrates l>y liquid piiase 
epitaxy were iniroducetl. The GiiP substrate, unlike tj^^uVs, is 
I rans|:yarent to the emitted light, allo\\i.ng these devices to be 
mtyre efficient ihan the (TaAsP stantiard reLl diodes. 1 low- 
eve r^ die emission wavelengib a1 700 nm is near the etige of 
the visible spectnmi. whicb limits then- usefulness. 

A ma,jor breakthrough in LEI) iHifontiiinre came in the 
eiirly 1970s with the addition of niiroi^en to (laAsP mid GaP 
eisitiDdal materials." '^-^ Nitrogen in tbese semiconductors is 
not a charge dopant; ratber it R>nns mi Lsr jelectronic^ impmity 
level in the l>andgap wbi<'[i behaves as mi efficient radiative 
recombinatif>n center for electrons and holes, hi tliis way, 
even indirect -bandgap (faP anci indirect eomposil^ions of 

■ !n a direct- bandgap seffiiconriuciOf- the ricumbi nation of eJeEirrans and botes ha-s a blgh 
probability of occurring through a band 4o -band radiative prot^ess in which a photon is 
emitted, In an indiTscl-bandgap seTniconductor. radiatjve band-to-band recombi nation ire- 
quirejs EhEJ interaction of a iattice vjfaratmn ia phnrianl with tfie ejection and hole For this 
loieraciioo the probat^ility is low, and CDnseqoenily nonradiative recombination processes 
dominate 
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GaAsP can be made to emit sub-biindgap ligti* efficiently. By 

the mid- 1970s, orange and yellow LKDs made fmm variotis 
alloys of GaAsP and green LEDs made from Gal* appeared 
on the market. 

The next breakthrough o< curred almost a derade later with 
the ini reduction of AlGaAs re<i-ligh!-eniiuing LEDs, growTi 
by liquid pliase epitaxy. Tliese provided two to ten times the 
iighf (Hit put performance of red GaAsR'^^* The reason for the 
range of performance of AlCiaAs is that it can be produceci 
in \^anoiis structural! forms: a single heterfjstructure on an 
absorbing substrate ( SH AS AlGaAs I, a double heterosinic- 
ture on aji absorfjii^g substrate (DH AS AlGaAs), and a 
double heterostnicture on a transpaient sub.'strate (HH TS 
AlOaAs). (See page B for an explanation of heterostnic- 
tures.) Thi.s v^as an iiuxjuitant milestone in LED technology' 
becatuse for the first t ime LEDs could begin to compete with 
incandescent Itunps in outdoor apphcations such as aatonio- 
bile tail lights, rufjvirtg irvessage panels, and other appiica- 
tions requlnrig high Ilnx output. Included in Fig, I is the flux 
retiuired for a red automobile tail tight, wiTich Is well within 
the fierfnnuance range of jMGaAs LEDs. rnfoitunately, 
AIGMs LEDs can efficient ly emit only red (c«- infr:iretl) 
light, which makes them iiiusui table for many applications. 

Tlie latest techncjlogy advance, and tlie subject of this paper, 
is the' development of AIInGaP double-heteixxstiitctutv 
LEDs, These devices span the color range from red-orange 
to green at light output peifomiance levels comparafjle to or 
exceeding those of AS mid TS AlGa.\s."-^ The AlliKial' itiate- 
HaLs me grown Ijy a iechiiique calleci {jrganometallic vajior 
phase epitaxy. Tliis growth teclmology has been used tVjr tjie 
production of oi>t.<>eleetronic semiconductors, especially laser 
diodes, for ^i munhei^ ofyecirs, but it has not been previously 
used for ihe ntas.s p induct ion of LEDs, 

Hewlett-PackartJ^s AlInGjiP devices cuixetitly being intro- 
dttced to the mark el have the highest lumituift.s perfomumce 
of atty visible LED to tlate. As the t ec-lmtjhigy mattii^es 
lltroiigh tJie HMJOs, ijeribrmance levels are expected to Iti- 
crease further and reach imcj the lens-of-iuniens-per-wait 
range. 

Properties of AlliiGaP 

Th(^ tjuntigiiiJ prf.^i)erties of sevrnal compoimd semiconductors 
used ill f^Ki) ice hnology are stiowu in Pig. 2. lUuslrated is 
tlie liandgap energ>^ as a function of ci^^isttd lattice constant* 
In a diagr^mi such as this, binai*y compound semiconductors, 
such as GaP and luR are ph>t1ed as single points, each with 
a uniijue bandgaj) aud lallicc coustant. Teniaiy' cfunpouuds, 
such as AKiaAs, are represented by a liiu^ drawr^t l>efwccu 
the two constituent binar>' compountLs. in this case AlAs and 
GaAs. Finally quateniary c ompound.s, such as AlhtGaP, are 
represented t>y an cruiosed region with the <*otistitiient 
binar>' ctmipoundsat the vertices. The complex nature of 
the crystal band structure and the transition from a direct- 
birndgaj) seinictuiductor to an in direct -band gap seiuii*onduc- 
toraie what give Ihe enclosed region its ctiaractciistic 
shape. Properties such as this are usually obtainc^d froni 
but 1 1 expcriuiem and theoiy. 

Tliis lype of diagian\ is usefitl for designing LED materiids 
for at least two reasons. First, it shows what comtioslt ions 
of AlhiGaP are direct-baiulgai) aiifi ther(^fore readily useful 
for maku\g clTicicnt LMDs, Sei'taul, fur high-quality i^pitiixial 
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growth it is necessaiy for the epitaxial layers to have the 
same lattice constant as the substrate on which tJiey are 
growu. Tliis diagram shows what con^posilions of AlInGaP 
will i)ro\idc this lattice matching condition for a given sulv 
si rate. Foi^ visible LEDs, Lhe two common substrates used 
are GaAs and GaH Clearly GaP is not inmiediately useful 
here because it is at the indireet-bandgap end of the 
AllnCiaP comijositiort region. This lea%'es Ga.'\s as die only 
stMtai>le suhsttaie. A vedical line druwu from the x ;ixis 
rhivRigh the GaAs point inlet sectis the -AllnGaP region and 
indicates the compositions that lattice match to a GaAs 
substrate. The composition that gives Urn lattice match 
condition is written as: 

(AIxGai_x)rh.^In(),.^. 

TliLs notation, w^hich is typical for describing compound 
semiconductors, indicates the j)roj)ortions of the constiiuenl 
atoms within the cr>^stai lattice, hi this case, l\alf Ihe group 
HI atoms are indium and the other half are some mixture of 
aluminum and gallium. By coincideiice. aJtiminum and gal- 
liuui have aptiroxiinately the .^aine atouiii^ si/.e within the 
lattice. As long as the amount of indium remains lixed at (15, 
the aliunirymn-giillium mix can var>' cutuimiotisly ftotu cUl 
idmuimun to all g^illium, and the lattice constatit will not 
chauge appreciably. Whal will t^hange is tlu* liandgap f>f the 
material. If the aluminutu is kept below x ^ 0.7, thi: band- 
gap is direct; above vtdues of x — 0.7, the bandgap becomes 
indhect. This case is illustrated in Fig. 2 where the line of 
lattic^e match crosses from the diiect region into the indireci 
region. 

The iiandgap diagram ijulicates the potential of a material 
for making LEDs, thai is, wlRHliur a material has a tlirect 
l>andgap and whether' the bandgap energ>^ is withui the 
[unpei- rmige for priHliKMng visible jihotons. Tlie actual per- 
fcjr-nuuice of a device depeuds on a mimber of additional 
factors. First, the growtli of high-quality (epitaxial niateritil 
must be possil)le. Ideally, the growth shoultl take place on a 
commonly available, inexpensive substrate and should be 
lattice matched to that sul>strat,e. Sec ond. it nurst bv pos- 
sible lo Unm a p-n Juiu lion in the material. Thirtl, to obtain 
the higiiest (|uaul urn ct tit iency it should be jjossible to grow 
a dcnildc iieturuslructuic. In the case of AHnfiaf* all liiree of 
ihese condldons are satisfied. 
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The Structure of LEDs: Homoj unctions and He tero junctions 



Light-emitting diodes come in a variety of types, differing in materials and in 
EpirsKial structure. GaAsP and GaP are used for the rnajority of red, orange, yeilow, 

and green LEDs currently in use. All these LEDs are homoj unction p-n diodes with 
either diffused junctions or junctions grown-in dunng the epitaxiaJ process. Fig. 1 
shows a cross section of a typical GaAsP homojunction chip. In other material 
systems, such as AIGa As and AllnGaPJt is possible to grow fayers of different 
compositions (heterostructures) and therefore different bandgaps while keepmg 
the iatrice constant the same in all the layers. This capabiiity means thai more 
complex and efficient LED struct u res can be grown with these materials. 

Fig. Z iflustrates an AiGaAs single-heterostructure (SH) chip The epitaKiaf part of 

the device consists of an n-type active layer where the light as generated, and a 
single p-type window layer on top. The composition of the windnw layer is chosen 
to have a significantly larger bandgap than the active layer and as such it is trans- 
parent to the light generated in the active layer [hence the nanrte window layer). 
The single heterojunctitin (excluding the one with the substratej, which in this 
case is also the p-n junction, is what defines this as a smgle-heterDStructure 
device. The efficiency increase is a result of the transparency of the window tayer 
and increased injection efficiency at the p-n hetefojunction 

A modification of the single heterostructure is the double heterostriicture (DHl 
shown in fig. 3, again using AIGaAs as an example. In this case an additional 
layer is grown between the active layer and the substrate. In a double hetero- 
structure, the two high -bandgap layers surrounding the active layer are referred to 
as confining layers Together they act to confme electrons and holes within the 
active layer where they recombine radiatively. The lower confining layer efficiently 
injects electrons into ihe active layer and helps channel some of the light out of 
the chip, while the upper confining Eayer acts as a window for the generated light. 
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Fig. 2. AIGaAs single- heiefos-iruciure LED on an absorbing GaAs substrate. 
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Rg. 1 AIGaAs doybte-hetarostmcture LED an aji absorbing substrata. 



OMVPE Growth of AllnGaP 

AlInGaP ;uKi it.s related tonipounds GtdnP and AllnP have 
been the s[ibject of study since the lOfiOs, Only within the 
last eight years, however* have reseai'cher-s been able to 
grow AlhiGaP control lably cUid w iOi higl; qualit>\ Double- 
beterosinicture AllnGaP senticonductor lasers that have a 
GalnP active layer have been rommercially available for at 
least five years. Tl\e development of tecfiniqiies for produc- 
ing AllnGaP LEDs has been slower because of the greater 



epitaxial layex thicknesses required and because of the 
laiger quantities needed to supply market demand. Also, 
high-performance LEDs require iiigjier-quality epitaxial 
groTAtli tiian semiconductor lasers. Tills is because LEDs 
generally operate at much lower cun'ent densities than 
semiconductor lasers (tens of amperes per square centime- 
ter versus hundreds or thousands of amperes per square 
centimeter), and nonradiative defects can dominate the 
recombination process. 
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Fig. 4, AIGaAs do.uble-hetemstnjrtijre LED on i transpaient substrate. 

If the upper confining layer fs grown especially thick, it can act as a mechanical 
'^substrate/ and the anginal absortmg GaAs substrate can he remDved by chemi- 
cal etching. This is a transparent-substrate double-he terostructure (TS DH| devtce 
and is shown in Fig 4. h Fig 4 the chip is turned upstde dawn se that the thick 
AIGaAs confining layer is on the boLium. This is the most efficient type of VEB 
chip. With external etflciencies approaching 15% for red AIGaAs lamps. 

Finally^ there is ihe AlfnGaP LED stiucturE. This device is shown in Fig. 5. It 
resembles the AlGaAs doubJe heierostructLife except far the presence of the GaP 
window layer In the case of AIGaAs. the upper confining layer can he grown many 
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Fig, 5, AltnGaP dmible-NtefostructEjre LEfl on an absorising substrate 

micromatars thick-, enDugh to couple light out of the chip afficfently. With AllnP. 
however, for epitaxial growth reasons it is not possible to produce a thick enough 
layer of high-guafity AllnGaP to act as an efficient window, or even to spread the 
current effectively to The edges ot the chip {3y growing a thick GaP layer on top of 
the active device stnjcture, an efficient wfndow js produced and the sheet resistance 
af the p layers is reducect enouyh to promote adequate current spreading 



Vapor phase epitaxy (VPE) aiid liquid pliase epitaxy (LPE) 
are tlie convniotily tisetl teelitiiques for Ute nia^K pioductioti 
of LED materials. GaAsP is best grown using the VPE 
method, aiicl AlGiuVs aiid GaP ate growth using tlte LPE 
method. jN either of these teehniqties works well tor tlte 
growth of AlhiCiaP. A third te(hiri([iie laUett orgajioiiretHaUic 
vapor phase epitaxy (OMVPE) does work well. OMVPE ls 
sir ti Liar I.0 roiiveTttional WE in which the react ajit materials 
tire trarifspoitpd iti vapor to on 10 the heate<i stjbsttatc where 
the epitaxial grr>wth takes place. Tli<^ mi.!in dilTeretic e is that 
instead of using metiillie chlorides as die s(june materials 
(GaCl:i or inCi:i, for example), OMVPE uses organometallic 
moieciiles. The materials used in the case of AlhiGaP are 
trimerhylahiniinuni, tritnethylgallmm, and I rim ethyl indium. 
Other similar orgmif>meta]hc compounds tirt* sometimes 
used as well. As m VPE, [jhosphine gas is useil as tiie source 
< jf phosphonis. By controllhig the ratio of constituent gases 
within th(* reaett>r, virtually atiy contposition of AlIn(TaP 
can be growti. The reactor is designed in such a way that 
the thicknesses rif ihe epitaxial layers can be precisely 
controlled. 

The scheinalic diagram in F\g. ;J slu>w^s a typical resear<*h- 
scale OMVPE reactor, hi Hits example, the .snbsirate sils flai 
on a hori/contal graphite slab inside a (jiiart>^ lube. Out.sidc 
the tube and surrounding the gia|)liilc is a itieial coil con- 
nected to a n mitt kilowatt radio frecjnericy generator The 
graphite is heated to around 70Q to B0(}%' by RF intJuction. 

There art* many variations on ttie design of the redactor 
I'haintKM. For i'xmnple, hi some existing cot nniercial 



OMVPE systetns, the wafers sit on a horizontal platter aird 
rotate either slowly or at higli sj^eed to achieve umfonn 
growl h across the wafer, Other systems use a barrel-type 
suseeptor inside a Uu'ge liell jiu', sitnilar to VPE and silicon 
ei>itaxy reaf:tors. The method for heating the suljstrates rat\ 
be RF induction, resistance heatei"s. or infr^ued lantjjs. 
Wliatever the configuration, the conceptual nature of the 
growth process remains essentially tlte same. 

ITi e organ oni etal 1 i c sot i rces 1 1 nd ere u rn 1 al vuo \u ten 4 >t' ^'^ i t' re 
conditifjns are either high-ptirity lifjnids or crystal h ne j>o I iris 
and are container! in small siainless-steel eyiindei^ measur- 
ing al)out eigltl incites hing by two inches iti diatneter. CBe- 
cause they are pyrophorie, these materials are never ex- 
posed to air and require careful Imndlhtg. ) Tlie cylinders iue 
I quipjn'tt wiUi an inlet purl cnmieilcd U* a dip tube, iuid an 
exit tit>rL Hydrogen gas Howing through the dip tulie and up 
ttirtiugh the tirgm Tomelitihc iirjLiiti or sohd becomes s£iturated 
with organometallic vapor.s. (This type of container is com- 
monly I ailed a "bublilrrr referring to the acUnn of die hydro- 
giMi bubbling Ihrough the liquid,) The mixture of hydrogen 
and vapor Hows out of die cylinckT tind to tiie reactor cham- 
biMv The exact mnount of organometallie vapor transported 
to thc^ reactor is cotitrollecl by itu^ i.emi>eraiore of ihu l.uibblerj 
winch d ( t e 11 n 1 ne s t h r va p or [ ) ress ure 4 > t [ 1 u < r >rgaj ion le la 1 1 i t ' 
material, and t)y the flow of hydrogen. 11ir temperature of 
the bubblers Ls controlled by itnmersion in a flui(i bath hi 
which Ihe temperature is regit lattx! within ±1). T'C or better. 
Sperial regidalras r^illiHi mass How conttolhTS precisely 
meter tiie How i>f hydrogen l<j each bubtiler. 
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At the entrance to the reaclur ctuyiiber, the reactiutt giises 
are mixed These gases consist of phospliine, a niixtiire of 
hycirogeo aoti tfie f^rg;uu>ioetaihe vapoi-s, rloptinl gases, and 
adfiitional hytirngen adtied as a tiihieiit. As tiie gases pass 
over Llie ho* substrate, decornposition of theptHJsijiiiiie, 
orgaiiornetalJicSj mid dopaj\l sotirre.s occurs. I Tall live condi- 
tions are correct, proper crystal growtli lakes |)lat:e in ;in 
ordcriy atomic layer-by] ay er [:>rocess. Hydrogen, iinreacted 
phosphine and oi-ganonietiallics, and reaction by-products 
such as niethaite are then diawn out of the reactor and 
tlnougb the \Ticuum pump for treatment as toxic exliaust 
waste. 

The growth of III-V epitaxial materials is typically con^plex, 
and tlie successful production of high-tjuaJity fihiis is dejjen- 
dent on many factors. The groi^tli of AlbiGaP is defmit ely 
no exception. Since this is a quaternary material system and 
is not automatically lattice matched to the substrate (unhke 
AIGaAs), the composition of tlie crystal lattice must be c;ire- 
fully controlletl during ihe growtli process. Ttiis means Ihat 
each layer in the double hel^TOslructure fias to have the 
proper proportions of aluminum, indium, ami galliunt. Fur- 
tliennore, the transition from one layer composition tf> the 
next oft en requires .spi^cial consideration to avoid intrtKluc- 
ing defects uito the lattice. Other factors, such as substrate 
temperature, total gas flow On o ugh the reactor, and dopant 
concentrations require careful optimization to achieve the 
best fmal device properiies. Even after years of research 
with OIVrvPE, there is still a certain amount of art uwolved 
in its practice. 

AlInGaP Device Structure 

As menlioned previously, the high -efficiency AllnGaP LED is 
a double-het en ^structure device. Fig, 4 sliows a cross-section 
of a Hewlett-Packard LED with Ihe individual epitaxial layei-s 
revealed. Tiie light -tirodut^ing ijari of the stnicture consists 
of a lower rontinmg layer of n-t>7)e Alh^P, a nominally mi- 
doped AlInGaP active layer, and an upper confmhtg layer nf 
p-ty|ie AllnP. Light is generated in Ibe active layer tiirougb 
the recombination of caniers ir^jecfed fn>m the p-n juntilon. 
The confining layers enhance minority carrier inJeclitJU and 
spatially (^online the electrons and holes witluu the artive 
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layer, increasing the probability for band to-btmd recoml>i- 
nation. For such a structure, the intenial (luantum efficiency 
(number of radiative rectmibinalions per total number of 
recoinbhuitions) caji lie very higlii even at-iproaclung 1(K)% 
for the best-quality materials. 

On top of the double heteiostnict ure is grown another layer, 
which serves two functions. First, it reduces the sheet resis- 
lancf^ of the p-tyiJe layers, promoting current spreading 
tbrfuigliuitl tlie ciiip, iuui second ^ it ac Is as a window layer 
to enbajiee coupling (jf the light out of the chip, Ettrly in the 
development phase of the AlInGaP LEDs it was disc^tnereri 
thai the thin upper confining layer of Alhip ideal tbrcontln- 
ing elect rfiiis cind holes in the active layer, is resistive cUid by 
iLself prevents current from the central ohmic ronta<'t 
(shown in Fig. 4) from spreading out to Uie edges of die 
chip. In factj with only AllnP as the top layer, virtually all of 
the ciuTcnt flows stnught down, and light generation occurs 
only beneath the conl-^u't and is blocked from escaping the 
chip by the contact ilself. With the addiliorMjr a (hit k con- 
ductive window, such as (JaP, the current is al)le lo spread 
out, and light generation occurs across the entire cbii>. Addi- 
tionally because the index of refraction (jfsemirnud actor's 
is high (typically aiound 3.^), witliout the windrjvv nnu'h of 
the light produced is Lrapi>ed inside tlie chip by total intenicil 
reflection and is eventually absorbed by the sub.strate. losing 
Snells law and geometric optics, it can be sliown that the 
thick window layer uicr eases the amount of light that can 
escape the clup by a factor of three. *^ 

Conceptually, any transparent atul condiictive epitaxial ma- 
teriiil could sen'e as the windovv material Fiom a practical 
standpoint, howev^er. there are few epitaxial materials that 
can be gro^Mi on tlie AlInGaP layers that satisfy the recju ire- 
men Is (if transpiiiency imd electrical coiuiuctivit>^ The two 
bi^sl materials are AltiaAs and GaP AlCiaAs is a lattice 
matched material with go(jd epitiixial gicjwth characteristics 
and acce|>iable conductivity. However, it Ls transparent only 
in tlie red and orange spectral range. At wavelengtlis lielow 
abo u T I > 1 n n i . Al G aAs 1 >egi n s t o at >so rh s i gn i fi can t ly G aP, on 
the otlier hand, altliougb niisniatched to the AlInGaP lattice 
by 4%, is highly conductive m\d transparent ui the spectral 
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region from red to green, which is perfect for the ^ectral 
range of AlInGaR 

Prom an epitaxial standpoint, the sucressful abrupt growtli 
of lattice mismatched GaP on aii AlInGaP heterostRicture is 
an interesting phenomenon. Nonnaly. one would not expect 
Gap to grow as a single crj^stal lajTr directly on a mis- 
matched "substrate** such as an AJlnGaP heterostructure. It 
usually takes special growth techniques, such as alloy grad- 
ing from one (composition to the other lo achieve a gradual 
change from the substrate lattice constant to that of the de- 
sired layer. (This is tiie (Yjuimon technique used for GcL'^P 
epitaxy on GaAs and GaP substrates. The grading takes 
place over a distance of tens of micrometers of epitaxial 
material.) We have developed a technique for growing the 
Gap window directly on the AlLiGaP heterostructure. The 
GaP at the interface with the AllnP contains a dense net- 
work of crystal defects (dislocations) caused by the lattice 
misniatc^h. The defect-rich layer is only a few hundred nano- 
meters tMck, It appeal's to have no effect on the transpar- 
ency or conducti\1ty of the window and the defects do not 
propagate down into the high-quality heterostructure where 
the light is generated. 

Instead of growing the thick GaP window using the 0]VT\TE 
technique, after the heterostnicture growth is completed tlie 
wafers aie removed from the OM\TE reactor and trans- 
ferred to a conventional hydride VPE reactor where a 
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45-micrometer layer of GaP is deposit e<i to complete the 
structure. The reason for the twostep ^owth process is to 
save time and cost- (Jrgaiionteiallic sources are expensive, 
whereas hydride VPE requires only inetallie gallium as a 
source. Also, the crystal grovilii rate using \TE can easily be 
ten tiines higher than with OMWE, which is desirable for 
the growth of thick layers. 

Device Fabrication 

The fabrication 4>f LED chips is relatively simple compared 
f o IC chip technologies. There is generally no high^^solution 
photolitliography involved, and often there is no multilayer 
processing. The rnain problems arise because of the inherent 
difficulties in working with IH-V semiconductor mareriaLs. 
Tliese processes are notorious for working <;me day atid not 
working die next, often \\itiioul a clear explaimlion for ti"tf 
change. Processing operations, such as premetalii/-ation 
cleaning, metal etching, contact alloying conditions, and 
ciicing-saw cut quality are constantly monitored and acljusted 
for optimmia device performance. 

hi its simplest form, tiie process ffjr makitig AlhiGaP cliips 
involves a metallization for the anode front contact pattern 
(usually a circular dot with or without fingers to promote 
current spreading), mechanical juid/or chetnical Ihinnitig of 
the wafer to achieve the proper die thickness, metallization 
on the back of the substrate for Ihe catlKHle contact, and 
saviing the wtifer int(.j in(Lli\iclual dice. The due iire assem- 
bled into the various latnp or ilisplay packages using auto- 
mated pi ck-and -place niacliines. Conductive silver epoxy is 
used to attach the die to its leadframe, and gold- wire ther- 
inosonic hondltig is used to bond to tlie top dot contact. In 
the ca.se of a lamp package, the maniifactm'ing process is 
completed by casting an epoxy ciome around the leadframe. 
A cross-sectional view of a cMp m a lamp package is sho%Ti 
in Fig. 4. Eveiy devit;e is tested to ciicxk the electrical cliar- 
acteristics, including the fonvard voltage at a specified ciu'- 
rent (usually 20 nij\} iiuid tiie reverse breakdown voltage at a 
specified cmrent (usually -.50 jiA). Optical performance is 
also measuied to check for light output flux, on-axis intensity', 
and doniinmit wa\'e length. 

Alio GaP Performance 

The operating c^lKiracleiistics of AUnGaP devices have al- 
ready been briefly described, especially their high light out- 
put perfunumice compared to other technologies. A more 
detailed anidysis of AUnCxaP perfoniimice is shown in Figs. 5 
and (3. Fig. 5 shows the external quantum efficiency for 
AilnGaP T-1 Vi lamps as a function of emission wavelength 
fri>m ab(int 5F]r» um to (>25 mii. (Tliese LEDs have the same 
doiible'heierostnjctLire configmation except for tiie com- 
position of the active layer wiiich is adjusted to vaty the 
emission wavelength.) Other types of T-l'/s LED lamps ax'e 
in<"!uded for compcU'ison. Diive cuiTcnt is 20 niA in all cases. 
Extenial i|iiimi[im efficiency is a measure of tlie number of 
photons en I it ted from the device per electron crossing the 
p-n jimction and is dependent on the efficiency of die semi- 
conductor de\ice at producing ))hotons (the intemiil quantum 
efTiciency) and on theal)ility In get those photons out of the 
<'hip and oul of die ImntJ package (package efficiency). If 
every elecLnjn-lujle pair prr)duced a photon and every photon 
were extracted from the device and measureti, the extenial 
quantum efficiency would he UMPm. 
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Fig, 5, Extfnial quaiilurii efliciency of T-l Vj AJlnGaP lamps noinparefl 
lu other techiujlogies. AJ^o shown is itiL' CIK Jmniaii-eye response 
curve. 

Internal quantum efficiency is Umited hy f he ciystaliine tiual- 
ily of the semicotKiucfor, by The tj^mtlgaji i>ropertie8 of the 
semiconductor, and hy ilu* (ievice stnu ture [i^uinojuiiciion 
or heterojunction). Di the specti'al range between 625 anti 
600 nni, tile efficiently is almost flat. Here, crystallii\e quality 
is good, m\d the Ijandgap of the activi* layer Ls direct aiitl 
M'cJJ away from the intiirecl crossover. j\lso, die bantigup 
dUfercncc between liic active layer mui the upper aiul lower 
confining layers is large, providing adequate trapping of 
electrons and holes within the active layer and erficient 
radiative recovnbinat ion. 

As the wavelengtli is reduced by increasing tlie aliuniniun- 
to-galHimi ratio in the active layer, several effects begin to 
lower the overall internal qiumtuin efficiency. First, tus Oie 
direcL/hidirect-hiuidgap crossover' is apprf>ached, there is a 
greater probal>iliiy \'nv hutirect-handgap non radiative frar^si- 
tions. This effect inere^Lses drainatieally as the wa\elenglh is 
reduceti. Second, because aJuniinuni is suctt a liiglUy reac- 
tive atomic species, it has the tendency to bring undesirable 
contaniinants, especially oxygen, into the ci-ystal lattice w^ith 
it. Ttiese in^purities act as noiu'adiativi^ ret^ombmal ion cen- 
ters for' electrons and holes. Consetiuenlly, as the propottion 
of aluminum in the active layer is increased to reduce the 
embsioti wavelength, more nonradiative recombination oc- 
cui-s. Finally, as the bandga[> of the acilve layer is increased, 
the iijjper and lower confining layers become less effuient 
at keeping electrons and lioles conttiined witiiin tlie active 
layer before they recombiiie. 

The relative importance of these three effects is still being 
investigated. Models dc^scribing di re ct/in direct -band^ap 
effects, defect-related nonradiative ie< orubinalion, and con- 
fining layer efficienc^v exist. Howeven tliese models are de- 
peudeni on an accurate knowledge of the bimdgap tjf the 
material. For AlInGaPj there is still uncertainty about the 
exact band gap propehic^s, notably the exact location of the 
direct/imlirect cj'osso\ei*. Il is cominojily heUeved I hat 
higher efficiencies at the shoi1 wa\eier^gths should be 
achieved wutli improved epitaxial growth techniques, 
possibly by improving the purity of the organomerallic 
source materials. 
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Fig. 6. LED liiniiiiiiLLs perXonnajue Tor AlUiUal* ci)m|>ai'ed lu oihiir 
leciiiiologies. Luniiiioiis perfontuuice is the pmduet of power effi- 
ciency (ruiig}ily equal lo f|iiantUTi] i^ffEcieiicy, Fig. 5) antl tiie eye's 
reKpitnse. 

i Jnte the light, is produced in tlie active layer the task be- 
comes one of getting tlie light out of the chip. Because live 
index of refraction of .semiconductors such as AllnGaf * is 
high fn = 3j">, approximately), most of the generated light 
dial strikes die sidewalls (jf the chip is lraii[>ed wiihin (he 
chip either because of total iniernal retlection or becrause of 
Frx^snel retlection. In the case of ati absorbing sub.st rate c^p, 
surli as the presein AlJnCfaP devieCj reflected ray^ genenilly 
are lost to ahsori>tioji in the siil>strate. We have minimized 
the losses froii'i total internal reflection with the addition of 
the thick Gal* window layen Nevertheless, even the best 
external quantum efficiency theoreticahy possible for a 
cubic-shape<l tlonhle-heterostnictiu^e absorbing substrate 
chip in air is only aboin 2%. 

The effects of total nitenial reflection and Fresnel reflection 
are ruiligated Ijy enc*ai>sulalitig the chip Tpvithin clear epoxy 
plastic shapefi with a hemispherical dome (tlie typical LED 
lanij) pac:kage configuration). Tlie plastic acts as an index- 
matching medium between tJie semiconductoi' and the air, 
reducing die effects of total inicnial reflect it>n and Fresnel 
renectiorr The heuiispheiical shape of t.tie plastic eliminates 
totid intenial rellectiou within theplastk: it.seiriiiid acts to 
focus the light from the cIu|l (Tenenilty, the external quan- 
tum etfu'iency of ait encatisulaled chip is incrciLsed by a 
fa<1or' of three, bringijig the tlietaetical maximum external 
quantum efllciency to between 6% and 7% for an absorbhig 
suhstiate chip. 

From Fig. 5 it can be seen that at the longer wavelengths, 
the extenud quajTtuin efficieiuy of AllnfJal' is about 6%, 
tompaiing favorably with al^sorlnng substrate liH AKiitAs at 
7%. t >nly TS AIGjlAs has a higher exieniiil ijuautum efficiency 
owing to the lack of absoiijtion by the sul>strate. All other 
LED materials are less efficient than .'UlntJal* from t^2-^ to 
555 nm. In the yellow-to-orange wavelength r^mge, tliis 
difference is an order of magnitude or more. 

bicitKled in Fig. 5 is the ClFl relative eye sensitivity curve 
u liich shows that the eye is most sensitive to greeri photon,^ 
and much less so to red phcjtons. This curve is used to con- 
vert ex1:enial quantum efficiency data to tlie hrniinoiLS per- 
fomiaiice data in Fig. ti. Fig. 6 shows lumens of visible light 
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emitted from the LED lamp per watt of power applied to the 
(ilode (y axis) as a function of eniissioii wavelength (x axis). 
This data \s represeniiitive of how the eye a^-tually respontis 
to vanoiis tyt>es of LEDs, The effect of the C'lE etir^-e is lo 
depress perfon^iajiee in th<^ red p^ut of the spectnim, result- 
ing in a dramatic int^ease in apparent peiformaJioe of ihe 
AHnGaP lamps romj)ared to even TS .AJGaAs la^iips. It 
should be pointed out I lull the AlInGaP data shown in Figs. 5 
and t) represents tlie besi reported results, whereas rhe data 
for the other technologies shows typical profluction values. 
R'oductdon performance values for AlhiGaP tire not yet es- 
tabUshed. Initially the perfoniiaiK e will be lower than the 
data shov^Ti here but is expected lo incTease and surpass 
this data its the technology evolves anci ruatures. 

Also indicated in Fig. 6 are the luminous performance levels 
for autonK)tive inci^tidesccnl ]aini>s, lioth filtered and unfd- 
tered. Tliese bend una jks aie useful because of the interest 
in using LEDs instead of incandescent lamps for tail lighLs, 
brake lights, turn signals, and side marker liglits on automo- 
i>iles and I nicks. The high efficiency of AKuyVs and ^\lln(jaP 
LEt)s auft I heir long hfetimes make lliern alhactive ahcnia- 
tives to incandescent light bullis ui the automotive industiy. 
Because LEDs ctm be assembled into a smaller package 
than aji incandescent bull), automotive design can be moix* 
flexible and tncrall manufai luiing costs lower. 

The reliability of AilnGaP LEDs is generally good compared 
to other ty]ws fsf LEDs. Stress tests in wbicli de\icer are 
djiven ai currenis ut^ tcj 5U hlX at ambient i(*mperatures 
ranging from -10 to +55^C show good light output and elee- 
tdcal stability beyond 1000 hours. Shiee AllnGaP LEDs have 
not existed ffjrveiy long, device lifetiMic data tis long as 
10,0(H) hom^s is sc'aice. However, indications arc that there 
are no inlierent rehability i)n>bleins asscjciated specifically 
witli AllnGaP. 

For some st i ess conditions, AllnGaP performs siguificaiUly 
l>etler^ lhat\ other jjroducts. For example, in higli4emf>erature, 
b i gli-1 T um i d J I y ( *oT u I i t i f >ns, A\ GiiAs Ui] Ds f ai 1 1 a i > i r 1 1 y b ecause 
of coiToskjn of Ihe high-aJuminum-contenl et>itaKial layers. 
Since the overall I Jiiununmn <-ontenI of AllnGaP devices is 
less tlian tbr.^GaASt this conoaion problem dt^es not ap- 
pear, mid AlIn(iaP LF^Ds perform veiy well in hlglefiumidhy 
conditions. j\lso, il is well-known thai sniud;u-<l yellow 
GaAsP LEDs exhiliit serious hght output degradation when 
operatefl at low tempt^ralures. Alhi(3aP LEDs demonstrate 
excellenl low-ten t|>et at ure stain lily. 



Of course* good LED de\ice performance and reliability do 
not happen aiitomaticaily. Tliere are many condlti<ins tliat 
occur during 1 be growtii of the epii axial material and during 
device iirocessiJig that affect initial light nutinit, electncal 
characteristi<'s. and tle\ice longevity. In fact, many factors 
affecting [>erformiyice tire not completely understood at this 
time. Widi ongoing mialysis of tlie problems that occur, addi- 
tional insiglit into the properties of AllnGaP epitaxial growth 
and de\ice design will follow. 

HP AllnGaP Products 

The proliferation of A!InGaP chips into various LED packages 
\\ill be an ongtung process o%^er the next few years. Initial 
market demands are for T-I Vi lamp packages for mo\mig 
message signs, liiglnvay w amiug markers, mid automotive 
and tiiick lighting applications. As of this writing, several 
.AJhiGaP kmip packages are availal)le in three colors from 
amber lo rednDrmige. Tliesc products are hsted iri Rig. 7, 

Conelumon 

Wv hiwv attempted to provide a general description and 
miderstiMiding ofllP's new faituly of LEDs made from 
.\lhi( raP. We have comt>ai'ed Ihe perfonuam i- mid prodnction 
of AUnGal^ dewes with other LED teclin<^k>gies. We have 
also tried to give the reader a general understiinding of LEDs 
mid the Ill-V processes necessaiy for their nianufactiae, 

HP's AllnGaP devices represent the brightest visible LEDs 
thai have ever been mmh\ Interest in tliem is c|uickly grow- 
ing as maiiufactttrers eortit^ up wiib new a|if)lications for 
them. Although comparably t^right red .^Itia^s LEDs have 
been available for several years, the appearance of bright 
orange antl yellow^ lamiis has made possible totaJ LED re- 
placements in ai>plications where low- wattage filament 
lanit)s have been used exclusively. The benelits of LEDs 
uiclude long lifetime, ijerlormance relialjility imder a broad 
range of ojjerating c^onditions. and over^dl cost siivings over 
traditional incandescent lamps. 

Ac kiio w^l edgni e n ts 

The develnpnienl of the AlhiGaP LIvDs took a number of 
years, stalling from tlic initial KiVD phase when we strug- 
gled to grow even single layei-s of not -veiy-good epitaxial 
materiaf Since tlien wc have come a long way tcjw^ards 
bringing AlluGaP out of the laboratory- atid into the product 
Vnn\ The autliors wisit to tlimik C hris Uirdixabah who has 
w^oikcd on prticessiiig AlbitiaP wiUVrs and lesting devices 
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rrom the veo' "^tarr of tl^p ]iroject, :iiid Tia Patterakis, Susmi 
Wti, Anna Vi0l and Charlotte Bala^ssa for processing the 
waferf>, Jielping with epi growth, ajid endless testing of 
AJIn(iar f:hips mu\ lamps. Other people who deserve rerog- 
nitioti for helping trj develop and undei^tand AJIiiGiJ* LED.s 
LncJude f>oug Shire, Dan Steigerwald, imd Fnmk Steranka. 
Finally, we would like to thank our R&D manager, C ieorge 
Craford. for his continuous support and encoiu'agejnent. 
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HP Task Broker: A Tool for 
Distributing Computational Tasks 

Inteliigent distribution of computation tasks, collective computing, load 
balancing, and heterogeneity are some of the features provided in the 
Task Broker tool to help make existing hardware more efficient and 
software developers more productive. 

by Terrence P. Graf, Renato G* Assini, John M. Lewis, Edward J. Sharpe, Jajnes J, Turner^ 
and Mieliael C. Ward 



ftp Task Broker is a software loal that piiabley efficient 
distribution of compiitationaJ lasks among heterogeneous 
computer systems running UNI X^^^-s^Tst em-based operatinij 
systems. Task Broker peil'onns its computational distribu- 
tion without requiring any changes to the apphcation. Task 
Broker relocates a Job and its data accortiing to niles set tip 
at Task Broker initialization. The other capabilities provided 
by Task Broker include: 

• Load baiauemg. Task Broker can Ire used to balance the 
computation load among a group of computer systems. 
Since Task I3roker has the abihty^ to futiJ the most available 
sen er for a cotnfjutation task transparently, it ciuj effec- 
tively level the load on a compuie group, thus helping to 
make existing hardware more efficient, 

• liUelligent targeting. Task Broker can transparently target 
specific senders most ai)iiropriate for a specialized task. For 
exauif>le, h\ graphics siuuilatiort apiilication may l>e tuore 
eftlcieittly executed on a uvachine witli a graphics accelera- 
tor or rast. lloatuig-point caijabilily. These tar|y(etlng charac- 
teristics can be built into the Tktsk Broker group definition 
witiiout requiiing the user to have any machine-specific 
knowk^dge. Thus, expensive resources don't need to be 
duplicated in a network. 

• Ct^llective c^omputing. Task Broker allows a network of 
workstations to fonn a ("oniputatioual cluster that can re- 
p lac e a far more ex[y*r' n s i \ e n u i i 1 1 f rri [ n * m i r s u j tc i c- om pii 1 er 
This approach offers nuiltiple advaiil;iges uver the single 
compute sender model. Some of these advantages include 
increased availability (no single point of fmlme), improved 
scalability (ease of upgrade), and reduced costs. See "III' 
Task Broker and Computational Clusters." on page 16. 

• Iletei-ogeneity. Task Broker can be useti to create a hetero- 
geneous cluster, allowing a network of machines from mul- 
tiple vendors to interoperate ma cotripletely Iraustjarent 
fashion, Task Broker will run on sev**ral dift^ncni work- 
station platforms, alt of which can interoperate its serv^ers 
iiiid clients. 

• DCE Interoperability. Task Broker is able to take advantage 
of niaity of die services provided by HPs DCE (Distributed 
Computing Environment) developer's environment. See 
"Tjisk Broker attd DCE lnteroperai>iiity," tjn page 19. 

HP Task Broker nms on MB !J()t)0 Scries 300, 400. t^OO, 700, 
and HOO computers rniuiing the Hr*-tX^' operating system, 
and the HP Apollo workstations t)N2r)t)0, DN3500, DN45O0. 



DN55(K), ;md DN 10000 nmnuig Domain/OS, In addition. 
Scientific Applications International Cori^oration (SAIC) has 
Ijorted Task Broker lo the Sun^), Siin4, and SPAHCstation 
platfonns. 

Automated Remote Access 

Tlie need to access remote computer resotu'ces has existed 
ever since c<jmputei*s were tied together by local area net- 
w^orks. Remote access gives the user a means of increasing 
productivity by aJlowii^g access to more powerful or special- 
ized computer resources. 

To access a remote resource, computer users have had to 
rely on guesswork for determining optintal placetnent. aiul 
have been saddled w iih the tediotis activity of manually 
moving files to and from a resource- 

'i'ask Biiiker effectively automates die marnuil tiisks required 
for distributing computations by; 

• Gathering machine-specific kitowledge from the end user 

• Aojily/.ing machine-specific information and selecting tiie 
most availybk* serv'cr 

• Connecting to a selected sender via telnet, remsh (remote 
shell), or erp (create remote process) 

• Copying pr'ograin and data files to a selected server via ftp 
(file trimsfer' t>iT>Tocc)h or NFS (Network Pile System) 

• I n vo king ap| ) 1 ic at ioj is o ve r the n et w ork 

• Copying the resulting data files back ftoni the serv(T via ftp 
or NFS. 

Each of the above steps is done atttomatically by Task Broker 
without the user needing to be aware of, or having to deal 
with, the details of server selection and data movement. 

Server selection is one of the most significant contributions 
provjt^ed by Task Broker For tiie user to determine the most 
apjiroijriate server for a job matiually, all of the dynamic 
variables of server availability would have to be captin-ed 
before every job siibmittaL Because Otis is a time-consuming, 
cumbersome process, developers trying to nm a job would 
spend very little time selecting an appropriate server 

Instead, developers would revert, to using either their own 
machine for compute jobs or Jtist a few popular machines, 
overloading those machines and undertoatUng others. In 
addititJU. havit^g lo rnana^f^ s^-Mial network connections 
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HP Task Broker and Computational 
Clusters 

A computatianal cluster is 3 gmup of worksiatians networked together and used 
as a single virtual computational resource. This notion is an extension of the Task 
Broker cluster concept, since it is based on the idea that a cluster of workstations 

can actually replace a mainframe. 

The motivation behind this corrcept comes from customers who are downsizing 

from a single compute server, such as a mainframe or supercomputer, or customers 
who have computationallv intensive tasks that can execute more effectivelv an a 
clyster of workstations. 

The advantages of the computational cluster over the resource that it (S mtended 
to replace are several' 

► The duster can be considerably less expensive then a mainframe. 

► The cluster is modular and therefore more easily upgradable. 

* The clyster can consist of workstations that may already exist in the environment 

Task Broker has an obvious role in this aree of computing, sirtce the computational 
cluster is really a special case of ttie Task Broker solution. However, it is important 
to note that, in terms of dismbuting computations, only a portion of the mainframe 
replacemant solution would be provided by Task Broker in its current form. 

Task Broker represents the class of solutions that provide a mechanism for coarse- 
grained parallelism <i,B„ giving the user the ahility to run muitipte tasks or appEica- 
tions in paralleh- The goal of this type of soluijon \$ to achieve parallelism without 
impacting the application, or to maximize the use of hardware 

A finer level of parallelism can be provided by tools that can break up an applica- 
tion into suhtasks and run them in parallel The subtasks can be procedures, loops, 
or even instructions. The goal of these solutions is to have an application coin- 
plete in the minimum time possihie, as opposed to those of the coarsegrained 
alternative, 

This area of computing is obviously more involved then can be covered here. The 
point to be made is that customers are m need of new ways of optimizing their 
use of hardware, and Task Broker can, in its current form, provide a solution, Task 
Broker can provide parallelism at the application level, which is a major portion of 
the computationai cluster solution. 



sintultajieoitsly to t ry to balatice the workload is also 
t'liiiihei-sonie, aiid teods to lead to the same revSiilt. The end 
result is increased frustration and decreased prodiictivity. 

Task Broker automates Ihese seiTices. wliteh nn>«t developers 
find {lifJK III! to iviaiixige manually, 

Biddlni^ and Exeeution 

A tnacliioe mntiiris Task Broker am act i\s a client, a server, 
or both. A Task Broker cliciil is a submitter of jrjbs into the 
compute groups, ajid a Task Broker sener is a mat^hine thai 
provides sendees For clients. A single insltmre of Task Bro- 
ker, called I he Task Broker daemon, resides on each rlient 
antl seiTer 

Each sender provides on^' t>r more services for the work 
grotip, each of vvhirh reiirestMit.s a.speciru^ compiite job. 
Seivers can provirle iuiy mimher of sei*v ices, and standees 
can be pro\ided by one cu' niore sei-v^ers ( wiiich would be 
necessar>^ to load balance the compute group ). 

Task Broker cllei^ts anil servers interact to distribute aiul 
execute jobs in the following matiner: 

1. A user submits a request for a service to tlie local Task 
Broker daemon (rlient daemon). 



2. The client daemon sends a message to the group of 
servers J re(iuest ing bids to service tlte subniittef I job. 

3. The servers ^-ompute their bids, or fiffhitfy ralnen, for the 
requested setvice, based on their availnbihty lo accept the 
job. Tht* Ijjds are jretunied to the client 

4. The client waits a preset amount of time fnrihe ser\^ers to 
return their bids antl selects the server wi\l\ die highiasi bid, 

5. The chent transmits the nece^ajy files (if necessai^} to 
the selected server* 

fi. Tlie server executes the job aceording to instructions in 
the local execution script. 

7, At job completion, the .server retiuiis \he oiiijjnt files to die 
client which are then pbced in the user's working directory. 

Since every job submitted to the work group u wolves bid- 
ding before acceptance by a seiver, and the bids c^m be 
cont|>uted dynamically based on the server's avmlability at 
that timt"^ the jobs are automatically seniced by the most 
atipropriate machirie. A failing machine \vill automatically 
be avoided by tliis bidding mechanism, mereasing the fault 
tolerance of the group. The basis for I lie bids or affinity 
values is described later. 

U there are nt) available servers when bids are requested, or 
if the relumed bids do not exceed a preset threshold because 
U^e sen'ers are all behig heavily used, the job will be put hilo 
a local queue. The jobs m the local queue will be resubmitted 
for bidF ifter a preset time limit or Ijy receiving a callback 
from a newly available sener In addition, the job may exe- 
cute locally if the submitting machine can also provide the 
requested service. 

Each daemon maintains a log file that is used to record 
daemon activity. These can be used to analyze the machine 
use in the work group and can be the basis for fine tuning 
the Task Broker uistallation. 

Task Broker Setup 

Task Broker setup takes place wlien the product is installed. 
Installation antl sctui> are jjerfonned by a Task Broker ad- 
ministralta. The Task Broker administrator is a user with the 
appropriate pentussions to initialize and modify the Task 
Broker inst^dlation of daemons and setup files. 

If^Tten hardware chimges are needed in the network the ad- 
ministrator needs to make sure the Task Broker setup files 
are kept cutTent. hi addhion, the administrator can make 
chmiges to the daemons setup files to fine tune I be installa- 
tion. To assist the administrator in this analysis, Task Broker 
can collecl information about daemon ajtd service at livity 
thi ntigh die use t>f its logging feature or its aeeoiiming file. 
Adrnitiistralor duties are given in reference t 

Each machine nuitting a Task Broker daemon needs some 
or all of I be ft)llt>vving files to operate as either a clieni or a 
ser\-er: 

Configuration File. This fde specifies what services are pro- 
vided, when I be setviccs are availaljU\ and wdto has access 
to these services, h also spetifies how services are to he 
provitled, and timier what <*onditiuns (see Fig. 1 ). The con- 
tents of a eonfigiuat ion file are tiivided into the following 
categories: 
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Network iUNi 
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Service 
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EndClass 
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End Service 
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Service 
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EndServtce 
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AfFINITV^ — 



ARGS^ 
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Fig, L Aji Lwn-unv nfTnsk Brnker nudignnirfnti ntn.s. 

• (ilobal paranit^tens. Tiirso paramelers specify changes to 
Task Brtjker cicfiiult values that govern Ihe global condition?^ 
on Lhe local lajsk Bn>kor conTpuler, Hit^ ijarameter that gov- 
erns Uie vvjiif ing pcriotl for tire task plarenicnt process and 
Llie paraiTiefer (iuil specifies wlieflier to recortl CPU tune 
used by Int al i;i.sks arc examples of gUilui! |)iiram«^fers. 

• Class definilion. Tliis definition specilles the nuiximiun 
number of services belonging to a named class that can nin 
on the lf>cal sender at one time. E\T'r>^ ser%iee specified nutsi 
be a meoiber of tbe specified cIllss. For exinnplc. Spjce 
mighi he a member t>f a class sy>ecitled as cadtools. 

• Ciieni fie Unit ion. This detinition specitles the sc^n^ers that 
C^an provide service to a cUent. 

• Service defifitlion. Tliis (lefimtion specilles items sin^h as 
the local senior's ability lo jjrovide a jiarllcular service, Ixiw 
the service wlil l>e processed^ the affinity value or affini^ty 
scni>t. 't\m\ u list cbent^s that tiave access to tht^ service. 

Service Script. Tliis is a shell ,scnpt that defines bow eacb 
servict* being iirovided by the server Is t-arried oub lliis script 
tyj>ieally hivokes an a|3plication lb:u provides ilie requested 
semee. This script is specified by I lie ARGS parameter in Uu^ 
seivice definition portion r>f tbe connguralitjn file. 




Affinitv Script This script defuies the al^forithm to be used by 
Tlii^ si'i^i^r to compute the affinily value when a Job is bid on. 
If a constiuit is used to define the af Unity value, this script is 
not ncededn 

Submit Script, This script, wbitli is invoked from a Task 
Broker chent, submits a service ret|tie.sl lor a Task Broker 
service. A service request contains inrotination sucfi as oj>- 
tioniii ijarameters or data files tiiat eause the service to be 
RUT in a specific manner. 

AlHitity Value 

Tht^ afiluity value is an integer frcjni tfj HOD tbal ([Uanlifles a 
Task Broker sender's alnlity to provide a s(>ecifir serslee. 
Tbe value may reflect tiie availabihty of ceilain comiruter 
resources such as disk space or other factors essential to 
Ijerform the service. 

.AJfinily values can eilluvr be hard-coded info die service 
script, which resides in eadi server's ctjungiiratioii file, or 
can l>e calculattHJ beff>rc each bid submittal Ibrotigh the use 
of an affinity scripb For example, the following script uses a 
bard-c o d e d ^ i f T[ 1 1 i I v value . 
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ITask Broker Service Definition 

# 

Service loo 

CLASS - service Jasks 

MAX_NUMB£R^2 

ALLOW =(17.34.567.*) 

M[N_FREESPACE^ 30000 

AFFINITY HO 



EntJservice 



In the above case, when tlic sener tlacnioii re^-eives a sen. it e 
request for the too ser\icc\ i! checks the yenlce {lefmitioii in 
its configuration flic, hi tiiis case, the tlaenicjii checks sevenU 
paranieters tor each senice request h recei%^es. SoiTie of' 
these checks ask the following queslions; 

* Is the numtjei' of tasks riuining less fhcui the tuaxmumi 
(MAX_NUMBER)? 

' Is the requester allowed to run the service here (ALLOW)? 

' AiQ there :iOM bytes of ft-ee disk space (MIN.FREESPACE).^ 

If Lhe aj^swer to all tlie al)ove questions is "^yes," the server 
daemon sends llie affinity v^ilue of 10 as its hUl tor the re- 
quested service, IT any of ilie answers is "no." ncj bid is 
returned to the requesting client 

The senice dc Unit ion can also invoke an affinity script as in 
tile fcjUowing exanipte, 

# Task Broker Sen^ice Deftnition 

# 

Service fno 

CLASS - service_tasks 

AFFINITY 3 "/Lisersytbroker/lib/foo.aff" 



Endservic^ 

The sliell script foo.aff could jjossihly include I lie pai-anieters 
speclTictl in the first examples semce defliiitiori such as 
IVIAX_NUMBER, ALLOW, and MINJREESPACE. It could also hiclude 
checks on the mat hine or user sutmiitling the request and 
checks on whelher the data to he accessed is locally resi- 
dent. Tlie resuii is tliai deperuling on the uutcouie of the 
checks, the st:npt wiil or will not send an affinity value to a 
requesting chent- 

For load balancing to take place properly, the afSnity scripts 
shouki be idem ical on every computer in Lhe compute 
group, Suice thc^ affinity values retimted liy the ser\^er dae- 
niojis threclly iifi'vvi tfte placemenl of jf>bs in a work group, 
proper pm"aineter selection in the affinity scripts is tiie key 
to optimal server selection. 

Example: A Distributed Make Facility 

This exiuuple will show how Task Eiioker can be Lised to 
create a distril>utetl make facility, enablhig compilEitions to be 
distributed to diriVrent workstations r^n the network so thai 
(hey can execute concurrently resultuig in linked binaries 
when everyifung Ls completed successfully. The procedure! is 
summarized in Fig 2. 

The process begins with the user on lite clieni: machine 
creating C program stjurce files ( " hi Fig. 2) and placing 
them in the source file duector>'. At '> compiles aie initiated 
at the client hy executing a makefHe, which in tuni invokes a 
submit script (tbrnake in tiiis exaitiplej. The submit script 
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submits a compile request to the local daemon, and at ' the 
rlieiiT daemon submits a makE6-5_serv reqiiesl, including infor- 
mation aboiir fJie directon^ rontainit^g rhe j^onrr t* nie.s. The 
senei's each bid on the compile re<]ue.si and when the se- 
lected sen er is availal>le (nuichirip A m this ease) its daemon 
accepts the contpile request and invokes ifs locaJ ce i*emce 
script ( <^ in Fig. 2). Tlte sen-ice script eat^ access the clietif s 
file s>'stem \1a NFS with Task Broker fierfonning the file 
system niounts if necessary ( '' in Fig. 2). 

The chent s snhniit sc ript is written such that it \%ill wiiit for 
siiccessfnl completitjn oi ail compilers before ret|uesling bids 
for the link service. Wlien the ser\'er accepts the link re^juest. 
the compiled code is linked to create ;in execittable prognm^, 
PittaJly. the file system containing the source files and the 
executable program file \h unmoimted. 

This example demonstrates several key fealTires of Task 
Broker: 

• Multiple instances of existing applications can be executed 
concitiTcntly iti a w^ork group with very little effoil, 

• Task Broker ]:>rovides a flexible way of delaying I [ie exe- 
cntion of an application until conditions necessary for its 
execution are lii place. In this case, the link operation 
was delayed until the distributed compiles completed 
successfully. 

• The service scripts t an be written to access remote data v1;i 
mechanisms such as NF'S mounts of client file systems. 

C on fig u rati on S trategi e s 

The following two examples of Task Broker cnnOgural ions 
will denionslnile different philoso|3hics of its use. 

Task Broker with a Mainframe. The llrs( exiirnple, which is 
showTi in Fig. S, illustrates how a group of Task Broker dae- 
mons can have their sei\ices au.^rnented by a m^iinframe. 



Task Broker and DCE Interoperability 

The HP DCE (OistrJhuteti Campulirg Environment I developers envfronment pro- 
vides a common stffiidsrds bssel fraiTffiwork for dtstnbuted adfom (strati on, ap^li 
mmn (JevelopiTiefi!, 3r>d execDfion m a netwmk of heterogeneous computer 
sv<.tem5 Designed to support the HP 9O0O Series; 7DQ and BTO compufer systems 
Tunnrf^g ttie HP-OX 90 operating system, HH DCE developer's environmertt is an 
implBfnematiQii of tfre Open Softv^sre Riiindation lOSF) DCt developer's services 
with additional toots for DCE based applfcation lievelopmenL 

The OCE core sefVicts incliKie security service, remote procedure calJ {flPC), direc- 
tory se!i/]Ces. Time service, aod threads Exlended services SiK:h as tfie distributed 

tife svstem are alM} provided 

Tfie current Task Broker already benefits fnjm, and can make use of many of these 
DCE services Spnce OCE was desfgned to provide benefits wittiout necessarily 
requiring :har>ges to eKisting apphcaiiDns, Task Broker can invoke applications 
that explicitly use some DCE services without modifications to Task Broker or the 
applications invoked by Task Broker. These OCE servjces incfude: 

• Remote Procedure Call |flPC) An appbcation written using RFC can be distribtited 
in a work group by Tasl^ Broker 

• Time Service The host machmes in a compute group can use the time service to 
keep their clocks synchronized This can greatly simplify the managemeni of a 
Task Broker installation because items such as the Task Broker daemon log fifes 
will have their time stamps synchronized 

• Di rectory Services, A pp fie at ions that make use of directory services can be 
manacied by Task Broker without restnction. 

• Threads. As with RPC. a myhithreaded appfication can b^ distributed by Task 
Broker without modification. 

• Distributed File System. This feature is. not only companble w.ih Task Broker, 
but will greatly simpfify distrihuted access in the Task Broker work group. 

• Diskless Support Task Broker will operate on diskless machines without 
mnrtificatinn 

For Task Broker to take advantage of other DpE services such as the security 
service will require interr^al changes to Task Broker 
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Each of the Thsk Broker daemons acts as a serV'Cr represent- 
ing a mainframe service in the work gronp. The bids made 
by t h V ( i atM i \ onty i n 1 1 i c a I e 1 1 1 1^ abil i t y f > f H i c m a i n f n3 me ( < r( a k e 
on additional work. I 'si ii^ Task Broker to combine a groii|i 
of worksladons vvilh a mail tint me tn itiin w;i>' has several 
key advantages: 

• Tlie tiiain frame resources can become transparently and 
seamlessly included in the work group without porting any 
of its applications. 

• The workstation users t^an gain access to mainframe re- 
sources without mat hine-specific know ledge, or even any 
k^lowl(xigc I hat the miiinframe is being accessed in their 
calculatioius. 

• A Task Broker daemon tiot^s not need to be preseitl on ever>^ 
host in a work group because a host can have a surrogate 
sender m the group acting on its behalf. 

The result in this example is tJiat Task Broker alkiw s f)verall 
hai<lv\'are vise t(j incretxse idong with the group's prothictivity 
with minimal impact on eilher hardware or software and 
littk' added expense. 

Flexible Work Group, The second example of a Task Broker 
connguration *iemonstrdies how Task Broker can he ust>d to 
cn^ate a flexible work grtJup- During the day the clients 
shown in Fig. 4 access a detlicated ser\ er group, and tiiiring 
The evtniing hours- when most users have gone home, somt^ 
of the clients become servers. 

This example makes use of Task Broker's ability to delay the 
submittal or acceptance of jobs until after a certain time of 
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Fig. 4, A nexible Task Broker 
work group in whicii f^ertain 
works ta I ions are configure' d to be 
tA W eit \ te r eiien t s orily or senders o n ly 
depending on tlje liine of day. Of 
course these systems have the 
software ami hardware rapahili- 
ties to ho cfients or sBrv'^ers. (a) 
During the daytime these dual- 
role sysierris are cronfigured to be 
cMenls only, (b) hi the after hours 
the syeiiertis arp used a.s ser\'erH 
only. 



day htis passed This cim be done either iii the submit script, 
delaying the time when clients request bids for the seivice, 
or Ijy selting ihe "lime-of-day" parameter in tJie afiniity 
scripb delayini* Ihe lime when certain seiTer daemons will 
begin generating bids for any service. 

Using Task Broker to implemeni this form of flexible 
c on ligij ration can contnbule lo a group's productivity in 
several ways: 

Woikstation users can access dedicated compute services 
during the day (in tliis c^ase the ser^^er pool) and can have 
their machme automatically added to the server pool after 
work hours. 

Large jobs requiring a large amount of compute power can 
be queued lo execute after hours to take advantage of the 
increased size of the server i>ool. 

Once tlie Task Broker work group has been set up as de- 
scribed, no interv^ention is needed to maintain a flexible 
configuration. Lfa user wislies to remove a nuichine from 
the server pool, a quick change to its affinity script Is all 
that is necessaj^^ 

These two examples are intended to show that Task Broker 
can be used to add flexibibiy !o an existing netwxirk as 
well as incretise access to computer resources that wert* 
\) re vi o us ly i nacc essi b le. 

Task Broker and Other Alternatives 

The strategy behind the Task Broker design is thai in nu>st 
cases the user is interest tni in: 
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• Having a job placed and executed as efficiently a^ possible 
and nol in oontrollmg the placenient of a job 

• DisTnlxiTing tasks at the application level rather than the 
Iiroceriure le\^el 

• Ha\1i^g a tool that will require no changes To the apptication 
to perform its function. 

Job Placement. Although Task Broker provides the user with 
tlie iitiiliiv to target specific machines for specialized tasks, 
its priniarj^ emphasis is to free the user from concerns about 
job placement. h\ environments using sr-arce resoui'ces, 
such as a single supercomputer, tJtere is a similar need for a 
tool to provide a way of preventing users from monopolizing 
that resource. 

For example, suppDse some Itistaliation has a tool that con- 
trols job queues on a mainframe. In lliis case, the user sub- 
mits a request to one of several queues along \^itli a set of 
optioiLs specifting execution limits, priority, aEid so on. The 
tool then accepts or rejects tlie queued job based on re- 
source limits imd other factors. If accepted, and there are 
available slots for inuuediate execution, the tool removes 



the request from the head of the qtieiie and the request is 
serviced. The request wiQ execute concurrently with other 
accepted jobs, based on an administrative limit. 

Task Broker provides a more general soiutloii lo this prob- 
lem- h views the entire network of maclunes as a scarce 
resource, and by load balancing the resoiu'ces. it prev ents 
any one machine in the group from being monopolized, or 
any iL^er from monopolizing too many resomTes. Thus, 
Task Broker will not forward a job to a server imless one 
is siifrlciently available. 

In addition. Task Broker provides mechanisms such as file 
transfers, remote file system mounts, and affinity calculations 
based on configuration that obviate the need for concerns 
ai^ont job placement. 

Granularity of Distribution. Task Broker distributes tasks at the 
aijpli cation level. Alternate strategies of distributed compu- 
tation, such as remote procediu-e call (RFC), provide remote 
placement at the [irocedure level 



HP Task Broker Version 1.1 



The accompanying article descrjbes the festuies provided in the ftrst version of 

Task Broker. The new version of Task Broker contains all the Features cantsined in 

Version 1 .02 and adds the follnwing features: 
I A graphical user mtertace [GUi) has been added to improve ttie products ease of 

USB. The GUI provides a visual interface Lo most af the Task Brokers command set 

and configuration mformation Rg 1 shuws some Gf the windows provided in thrs 

new GUI for configuration management. 
' CentralJied configuration managoment has tiaen added to allow the enure Task 

Broker instaHation to be inillatized using a sirtgie group conffguration and to be 



admmistered from any single machine site. What this means is that the data \n 

the configuration fifes described in tlie accompanying article can be located at one 

machine site, 
f An integrated forms- based configuration editor is provided. The coE^figuration 

syntax is simpler and checking is done durmg the editing session 
' FmalJy. m online, contexl- sensitive tieJp subsystem has been added. 




Frg. 1. The nav^ Tasif Braider graphical user 
interlace 
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T\w diffvTpnce reprt»sefits a tradt*-c>ff of conipiitationa] con- 
trol versus ease nfimplompntatirm. RPf n^qiiires prfxt-flnvo 
rails in im appliration to he tpplaceci hy call suilxs in an iiiter- 
mefiiate definition lan^nage. Tiiese stul^Js hancilr the* remote 
pla< ement oflheartiial procedure c^iJl. As such, RPC requires 
n [Atomized applicarkm source code, most of which must be 
redeftijJnetl and reimpJemented if not r>nj*inally implemented 
using Fi PC, 

With RPC the procedure is usually iocaicd on a centralized 
sener. or replicated in several places (requiriTi^ the senders 
to kre[i rh(> replica-s svTTchronizcd). While tlie server side ot 
the apjilicalion is executing, the client side is not, renerting 
ilit^ synchronous nature olfjnxvduie calls, 

l\} summary; Task Broker is noniutnisive to application 
sfjun (^ f*ofle (satisfying the third user interest a}>ove) and 
allows the execution of the applications it cJistributes lo take 
place* concurrently. It dfies, however, limit the tLser to remote 
plac*emeut at the application level. RPC gives a finer level of 
compulationaJ control, but I'equires source cofle changes anrl 
does not provide a mechanism for cont urrent execution. 

Conehisian 

r^isk hrnker can provide many henellts lo an orgtmization 
with a network of cmnputers. Because of its nexihilily, Task 
Broker cvui easily he laih>red to provide a simple dislrihuled 



solution 10 many additional types of situations. A.H a tool for 
disthbuting t fJtnputation tasks. T^Lsk Broker can provide a 
way to ti^ake existing liardware jnore efficient by increasing 
its level of use. and software developer's more product i\'e by 
providing a way to access an extJ'iJi<Jf^t' sel of computing 
resources 
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The HP-RT Real-Time Operating 
System 

An operating system that is compatible with the HP-UX* operating system 
through compliance with the POSIX industry standards uses a multi- 
threaded kernel and other mechanisms to provide guaranteed real-time 
response to high-priority operations. 

by Kevin D. Morgan 



HP-RTf is nowic^lt-PaLkaj'tis rt^td-rinieoiHi^iatiug isyj^lem for 
PA-RISC coi up liters. It is a run-thue-onenied product (as 
opposed lo a prograiivdi?veli>piiit'ni-oi1eiUF(i j>ro<lu('i J basi d 
on industry' standard softw;ue and hardwaie Ijiiei (act's. 
HF-HT is irUended to be used as a real-time data acquisition 
aiKl system control operating i^y stem. It is designed around 
Uie real-til tie syslem principles of detertiiinisni (pretJictaljle 
belia\ior}, resj>onshencss, user comrol, reliahiliry, cuui fail- 
soli i>pcniliou. Tiiese t luiracteristics distinguish a reaJliiue 
operating system from a nonreal-tiine operating system. 
This ailicle reviews some of these characteiistics of HP-RT 
and discusses the sijeciOc tlesi^ns itsed to provide these 
features, 

HP-RT rujts on the 1!1>9U0U Mode] 742j1 VMEbus lioard-level 
{(jmp liter, wtiich is Ijtusi^d on HP's PA-RlSt^ 7100 tec'lutoiog>' 
(see Fig. 1). The 742rl is designed to fit into a VTVIEbus card 
cage or an HP 901 H) Model 717i iudus trial workstation 
cabitiet. ^ 

The HP-RT keniel is compatible with the HP-UX operating 
syslein lhrouje;h compliance with the following iiiduslry 
.standards: 

• POSIX {Portable Operating System biterf^ce) lOOai, which 
detlnes a standard set of progranimaiit iiUeiTaces for ba.sic 
ojier^iting sysk-ni facilities 

• POSIX UMIA draft 9, witich defines the standards for 
real-Unie i^xtcjisions 

• POSIX UKJ^.4a drj:ift 4. which defines the standards for 
pnjcessdevel threads. 

III^-RT id^a supiHJrls C/ANSI C, 0+, m-KiSC tissembly lan- 
guage, and tnany SVH J/HSI) (System V Interface Definitioiv 
B^^rkeley Softwiire Dislribulion) eomniands and functions. 

HP-RT Software 

Tlu' HP RT software is divided inio two main categories: the 
HP RT kcrnci and Ihe tJptional HP RT services (see Fig, 2). 

HP'RT Serviaes. l he optional IIF-RT services inelude the 
fo llo w1 ti g CO m I ) o J ten I s : 

• Network services int^liiding the Network File System (NFS). 
TC!V1P, Berkeley suekels^ and ARPA/lierki4ey networking 
seiviceB 

i HH-R7 (s ti&m&6 frarr a ihird pany opefardvg systeni cdlltjd LyruiOS frotri i^nx' Real Time 
Systems Iik: All kernttM^vel dlganihiM and data structures described in ihi^papar ar^ b^i^ed 
on tynxOS features. 



• Librailc-s for developing OSF/ Mot if giapl lit al user Lnlerfaces 
cUid X clients 

• De^elDpnient tools rcj help users create applications to iiui 
ijt the liP-KT en\iroonient 

• Ctoss debuggers hosted on an HP-UX development work- 
station for debugging the HP-RT kernel or api>lications 
running on an IIP-KT target system. 




(al 




(bl 



FiiE, L (Hj Tin- HJMKlDO Mt,Ki(4 7^2rl Imrird-lcvd c-otnpuirr 
[ii] An ill' iHM} %iudv\ T{7y irKlu>,i.rUil worksiiihoii with a Model 
742rl l( jaded in. 
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HP-RT Services 

• Dev«topmfint Tools 

• Cross Debuggers 

• Graphicat User Inteifsce 
{GUI} Tools 

- TCP/in NFS 



HPRTKemtl 

• File System 

• I/O Orivers 

• Semapharfis 

• Memorv Management 

• Sysfem ClocJc anrf Trmers 

• Scheduring, Muhrtasking. Muiyth reading 

• I nierrupi Handling 

• Character I/O 

• Interprocess CemmuiiiDalion 



Applipation Prograni 




Fig. 2. Tlie HP-RT keniel aiid services. 

Kernel Software. Tfie HP-RT kernel is designed so thai it can 

bo sealed to balance nienioiy and perfonnaiiee requirements. 

It is small to reduce overhead. The keniel coniponents 

include: 

A counting semaphore nicchanisni for process s^iiclironiza- 

Lion and to help ensure atomiciLy around critical sections of 

code. 

A system clot k that generates tinte interrupts every 10 

milliseconds. Tints, lime eveiUs using standard software 



interfare.s have a U)-millisecond resninfion. For higher 
tiniitig actairacies. drivers and user processes can access 
tlie hardware timers on the Model 742rt. These timers have 
l-LLs resokitif^ns and are Hi and 32 bits vslde, 

• E/f) drivers r<ir Ethernet, SC^Sl 11, RS-2;i2-C\ and pandlel I/O 
tor the Model 742it computer, and guidelines for writing 
VMEInts tl rivers 

* St4"tndard operating system services such as: 

Sclieiliiling, ntultiULsking, and tiutltithreading 

Meinuiy mmiagetneni 

lulennitJl lumdiing 

Chaiacter 1/CJ 

Interprocess eommimication 

POSLX 1003.1, .4, and .4a kernel services, 

Majiy of tfvese components are described in more detail later 
ill this aiiitle. 

HP-RT Developtitetit Enviroriment Tlie development environ- 
mem tor HP-RT is shtiwn in Fig. 3. Prognirvis treated to run 
on the McKlel 742i1 in Ute HP-RT enilronntent tU'e develop )cd 
(iLsing PA- RISC rtjrnpilers and linkers) on an HP 9(K)() Series 
700 or 800 HP- 1 ^X system. The executable ijrognuns c;in be 
tlownloaded via l^N tt> a local disk tjn the t;irgei system 
{Model 742rt ). or implicilly cknMiloaded when (he jinigraiu is 
executed via NFS tiiounting between the HP-RT ;md HP-UX 
systems. The user can debug the downloaded progrmii from 
the host system via the RS-232-C and \AN conned ions bc- 
tw^een the two systems. Users can customize the SoftBi^nch 
softw^tu'e development environment^ on the development 
host lo lautich proj»*rams l(t a remote HP-RT system iUid to 
launch the correct i>rograni tk^bugger for HP-RT program 
debugging. 
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Fig. 3. The Hi'-RT developtripnt 
enviniimient. 
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Tlie items that come with the HP-RT development toolkit 
inchide: 

• libraries for buildmg HP-RT kernels and user programs 

• Include fdes for conipiling user programs and 1/0 drivers for 
executijig in an HP-RT operating emlronmeni 

• Installation and user prograrn compilation seripls 

• A pair of source-ieveJ debuggers; one for user program de- 
bugging and one for 1/0 driver and kemeMevel debugging. 

The two remote debuggers included with the IIP-HT develop- 
ment kit are derived from ihe standard xdb debugger produrt 
provided with the IIP-L'X operating sj^siem. Tlte debugger 
used for user program debugging is capable of debugging 
muhithreaded user processes and communicating with the 
target HP-RT system using a TCP (Transmission Cojitroi 
Protocol) virtual circuit socket. The kernel debugger is for 
kernel-level and I/O driver debugging and communicates with 
the target HP-RT system via a dedicated RS-232-C serial 
conmiunication link. Using a dedicated communicai ion link 
allows the kernel debugger to operate without imerreririg 
with the normal operation of the target operating system. 

A set of user conmiands, a ijootabJe kernel, and miscella- 
neous files are included with the HP-RT system. These itenis 
can be installed via LAN on a disk connected to the target 
system. The HP-RT kernel can also be booted across a L\N 
and conrmands atid user programs can either reside in RAM 
memory (via a RA.M disk facility) or be accessed across the 
network via NFS momit points. Tlie command set on the 
HP-RT target system is oriented arouJul mn-time operations 
and sj^tem administration. Commands related to progiam 
development (such as cc and the res and sees tools) aie not 
supported and can only be used on the host. 

HP-RT Hardware 

The hardware ttiat supports execution of the HP-RT operat- 
ing system is the HP 9000 Model 742rt VMEbus board com- 
puter shown in Fig. L This system c:onsumes consumes two 
slots of a V'MEbus backplane. Tlie system processing unit 
and onboard I/O features of tJie Model 742rt include: 

• PA-RISC 7100 processor, which has a clock frequency of 
50 MHz and is capable of executing lU MIPS 

• 8M bytes of ECC (error correction code) liAM for main 
memory, which cm) be upgraded to t>4M bytes of ECC RAM 
(The ECC RAM comes in a pair of SIMMs and proi^ldes 
single-bit error correction and multiple-bit error detection.) 

• 64K-byte extenial instruction cache and 64K-byte external 
data cache 

• Ojiboaid I/O ports Tor one SCSI 11 interface (up to seven 
devices), two serial R^-'Zr^^-C interfaces, one parallel 
interface, and one Ethentet LAN interfac^e 

• VMEbus D64 interface, which provides an as>Tichronous, 
32-bit data bus that is capable of transfer rates of up to 
40 Mbytes/s. 

The ReaJ'Unie Kernel 

The HP-RT keniel and I/O drivers are designed for real-time 
response and tieterminism at a le\'e! never before accom- 
plished in a Hewlett-Packard operating system product. The 
HP-RT kennel ensmes that the highest jinoriry oficralions iut' 
serviced witliin 5f) to 1 10 micros(^ct)n<is in the woi>>r case and 
tyi)iciilly much faster dci>eMding on the specifu* operation. 
To accomi>lish this, tht^ HP-RT kernel use^ a fiillv reentrant 



and interrtipraljfe d^ign and makes extensive use of fiilJ 
kernel support for (hreatis for user and kernel prtjcesses. 

Multithreaded Kernel 

The fundamental unit of an executing task in HP-ET is the 
concept and structure of a thread, A thread contaijis a pro- 
gram counter t next instniction pointer] and a stack for re- 
cording local subroutine variai>les and caiMiig settuence pa- 
rameters. Tlireads do not own a specific address ^ace or a 
specific set of code. Threads topically share address spare 
(data iirea) and ccKle with other threads. The concept of a 
process is simply a combination of a sing!e thread, a code 
segment, and a data area (see Fig. 4a). HP-RT extends this 
concept by allo\^ing a single process to create multiple 
threads (see Fig. 4b). These additional ih reads execute code 
in the same process code area and ha\"e identic al access 
riglus to all data aieas m the process. See "An Overview of 
Threatlsr on page 27 for a bnef tutorial on threads. 

HP'HT also implements the concept of a kernel thread. A 
kernel thread is a thread of execution that only executes 
keniel code at a kernel privilege level. Kernel threads are 
used m HP-RT to provide kernel sen ices asj^Tichronously 
for any specific user process or thread with each service 
executhig al a user-specified prionty. 

Reentrancy and Interruptability 

The HP-RT kemers general uiodei is to execute on behalf of 
a thread of execution with intemtpts enabled and context 
switrhiug allowed. The spec iflt* thread executing may be a 
thread assoi iah'ti with a user [jrocess or a kernel dnead. All 
threads, regardless of t>i)e, have their own userspecified 
priority, sche(iuhng i>oiit:y (tune-sliced versus run-to- 
completion), anct system level. 

The system level is a specification of the mode in which a 
thread is executing. At system level zero, a tin cad rmis in 
user' mt.Kle, with user-level privileges. Kernel threads by tlell- 
niIior> never use t his system level. At syslem level ijne, a 
thread executes kernel code witlj kemel-ievel privileges and 
with all intemipts enabled ami context switching allowed. 
At system level two, a thread executes kernel code with 
context switching* disableil, bul ir\teiTUpts enabled. Finally, 
at system level Ihree, a threatJ executes kernel-level code 
with botli ctjntext switching and inteinipts (iisabled. Table I 
summarizes these system levels and execution modes. 

Context, switchkig m\d interrnpt handling in HP-RT are 
described in more detail in the article on page 31, 
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( } J ) A n n J I [ i I J ] e -Ih n ' w\ \) ych thh , 



AligUHt lf»£?:i IU'hIi'K hltkJiRlJrjuni; 



25 



)Copr. 1949-1998 Hewlett-Packard Co. 







Table 1 






System Levels and Execution Modes 




System 


Execution 


Context 


Interrupts 


Level 


Mode 


Switching 




Z*-io 


User 


Ailt>weci 


Enabled 


One 


Kernel 


i\JJowed 


Kiiabletl 


Two 


Keniel 


Disallowed 


Enabled 


Three 


Kemel 


Disallowed 


Disabled 



The HP-RT system supports one nonthiead mode of execu- 
tion ^ which is based on execution using a single interrupt 
stack. However, unlike tinieshaiing systems and many real- 
time systems, HP-RT makes very limited use of inteiTupt- 
sLack-based execution lieeausc^ tliis mode oft^xeeution is 
always at a liiglier priority tlian tluead exeeudon. Executiiui 
using an interrupt stack me^uis that a full Uut^ad foutext. is 
not fsliiblished, which meiins that at-outc^xt switch to a 
tfuead cannot be allowed uniil the interrupt-staek-hased 
exet:ution is complete. Most interrupt sendee routines, such 
as the handlers for i fie SCSI bus arid LAN itueJiupLs, are 
instead handled by a spet ifif kt^niel thread, These threads 
are scheduled when their curr est bonding liiterm|jt occurs at 
their specific: [priority and are not executed until aU higher- 
priority tliread execution is complete. 

Because of the geneniJ reentniney of HF^RTt explicit calls 
aie used in kernel cxnit^ ;ui<l 1/(1 flrjvei's for managing leeu- 
timicy.t The macros sdisabie(|, srestoreO, disablel), and restorej) 
are used to move a process to system levels two (context 
switch disabletl) or three (both context switching and inter- 
rupts disabled) mid back to Ihe premove systetn level. Turn- 
ing context switcliing off guaiantees atomicity with respect 
to the execution of other tlueads. Tiuiung off iiuen\i]its guar- 
antees atonvicity with respect to execution of both llu^eads 
ai u1 in ( e mi p t-stack-based hm\ d let^- 

Data structures used by the kernel are generally global to the 
entire kernel iutd noureentraiU operations must be properly 
protected. A siniple example ot this is t Ite use_count tleld of 
the in-core inadett datastnjeture. The use coum Held indi- 
cates tlie number of uistances of a particulate tile that ate 
active (e.g., open). When a new process accesses an inode, tiie 
equivalent of the code statement inade_ptr->in_L}seih (incre- 
ment ose_cDuni) must be executed. On PA- RISC' [and most 
RISC processors), this code timislates to a sequence of in- 
structions that loads Uie use_coijnt value, increments itt and 
then stores the value to the mtMiK>rj' locration it came froui. 
biterlea\Tng such operations, whit h can easily hapt)en be- 
cause of a context switch from one diread to aiujther, wid 
cause the use^count to miss an increment, producing devas- 
tating loug-teriTi results. 

For example. Fig, 5 shows what can happen wlven a threati 
is iiUerrupted before finishitig iticremetiting the use.cnunt 
field for a particular inode. The use^count field is represented 

T A rEentrani process consists pt logically separate code a«d dala segments and a private ^mct 
MulirpiG instances af a reentrar>i procsss cm sh^are the same codE? sepieni but eacti msiance 
has its own data sepmeot an£t stock 

tt An in&de rs the intern^al reprssentatfon of a file in a UfJJX^'Systgm-b^s^d.Dperdtmg^^tem 

An in- core mode is one that restcJes m mam mefn-ory. 



by the viuiable X. which is iiiilially equal to one (i.e,, some 
ollicj thread hj process is accessing the same fiU^). AI '• 
Thrt^ad 1 begiiLs execuiiug the inslntctions to increnu-nt X, 
but just before .siurijig tiie result in X, Thread 2 intetrui>is at 
'' and the scliedidet iuuid^i control over to Thread 2. fhread 
2 increments the simie use_coLni ileld. When Thread 2 is tli^ 
ishetl, X -2 and the stlieditlej lelurns cojttrol buck to 
Tluead 1 at ' . Ai '• Thread 1 lltiislies its work on the 
use. CO lint field by sturlttg lite value it cotnpttted l)efoie l)eing 
interrupted uito X. At I his poittt X should lje equal !o tfiree, 
but because 'fliread 1 was itUernipted before it finished its 
critical sectioti, X = Z. 

The i\eed fur atomic uicrement and decreuu^nt op(*ratiotts 
is su tJeivasive in tiie IIF -K'f kernel diat spet i;:il itiacros 
called ATOIVIICJNCO and ATOIVIIC_DEC() aie used Tliese macros 
generate inhne assembly t:ode that disables mtcrmji^ts, per- 
lot ins tile im:rement ta decreivient operation, and reenables 
inteniipts. 

L^se of aji inteiTupt disable versus a context switt h disable 
is a key design decisioti for evei;y critical section of HF-HT 
kernel code. The main question asked in arriving at a deci- 
sion is whether the operation is critical lelative to execution 
of cutle that caji ruiiuii the i]itenu]Jl stack. Sijice ver>' iiole 
code in IIP-RT executes fin the iriieMupt stack, a context 
switch disable usually suffices fur protection. However, a 
context switch disable is a more expensive operation dtan 
ajl inteniipt disable u|ieration. A context switch requires 
memory access and mt itiierrujM disable only requires exe- 
cution of ail inline asseml/ly statement which tunis off die 
interrupt enable bit in the PA-RISC' processor status word. 
Thus, very short oj) orations are better prtJtectetl witJi 
uiteriTipi dLsables. 

This raises the question of liow Hl'-RT solves the f>roblem of 
lonj^ critical secliotis lor winch a c(>nit\xt switch ov an inter- 
rupt disal>le last too long, hi die analysis of customer re- 
tjtiirements and competitive systems, it was detenmned tliat 
t ontext switt h off times should be held to as close to 100 
microseconds as possible, and ideally less^ and iotenupt 
disables should be held as close lu 50 mJcrosecoutts <is pos- 
sible. ai\d ideaHy less. Lonjler critical sections are nianageti 
using keni eh level semaphores. 



0x = 




Ihread t Tliread 2 

X = u». count Field in inode Oaia Structure 
iltL rl1 = Regislefs 



Fig. 5. Whai i'l^x happen whet t a tJiread is t'onlext switched in the 
taiddlc uf a tribcai operation. Tluead 1 is iiut'rmpied ai^d coiitext 
switched just be lure it is about to intrenieni tlie use^counl value. Ai^ a 
ni'sull, wtien Tltread 1 k finaJiy able tu fuiish its tjpt^ration, tlie wrong 
Viilue iH stored in use_i:ounr 
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An Overview of Threads 



^ 



When a process is rumitng it executes a sequence of instruct Ions stored in its 
acMre© spacB m m^TMJfv. This ejteciiiran of a sequence of irtstructions is caJted a 
thfesd of exectrtion. or simply e thread Tfie exeeuiior of a thread requires thet it 
ha^ Its own program couFTter to point to il\e ne«t irtstmction m Ihe sequeiKe, 
some regfSters to tiold var tables, anil a stack to keep track n! local vai tables and 
procedure call mfofmaDDfl Although threes have some of the same cfiaractefis- 
tics as a regular process, they are sometimes caHed a "lightweight" pro^ss be- 
cause they don t cany around the overhead (or axtfa weightl of regolar pnxesses 
Table I lists some typot items associated with each thread and each prDCess 

Fig. 1 mcMJels processes and threads rijnni/^g in a computer. The processes m Fjg. 

la have one thread of execLrnon each. Tliey also have Their own address spaces 

making them independent of each other To communrcate with each other [fof 
example, to share resourcasj they must do so through the system's interprocess 
cammunicatian prfmrtlves^ such as semaphores, monitors, or messages, fn fig. 1 h 
the threa threads are rn one process, Thus they share the same address space and 
have access to alf the per-process items listed, in Tabfe t. 

One of the reasons threads were invented was to provide a degree of quasrparalJel 
execuhon to he combined with sequential e;(ecution and blocking system ceiIIs. Far 
example, consider a file server that must block occasionafly to wait for the disk. In 
a single-process situation the server would get a request and service it to comple- 
tion before moving on to the next request. Thus, no other requests would be serv- 
iced while the server is waiting on the disk. If the machine is a dedicated tile 
server, the CPU is also idle while the server process is waiting on the disk 
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Rg. 1. Models of prnces&es ancf threads running m a computei. iaj Multiple procBSses, 
{b) MultiplB thraadis in ona prcKi^ss, 





Table 1 




IteFfis Associated with Tli reads and Processes 


Per-Thread Iteite'' 




Per-process Items 


Pf ogr am counter 




Address space 


Slack 




Global variables 


Ragfsters 




Flies 

Child pnicesses 

Signals 

Semaphores 



' AH per-ttiread irefps are also per-process trems 

If the server is a multithreaded process, one thread could be responsible for read- 
ing and esjamining incoming requests and then passing the request to a thread 
that vi^ill do the work When a thread must block waiting on the disk, the schedul- 
ing thread can get another request and invoke another thread to njn, The result of 
using threads in this case would be higher throughput tiecause the CPU would not 
sit idle, and better perfonnance because it is much faster to switch threads than 
to switch processes. 

\n a real-time system where a quick response ro interrupts and other events is 
critical, threads offer some definite advantages, especially if one considers 
context switching between processes versus switching between threads. Table II 
summarises some of the main differences between threads and processes. 

Table II 
Differences between Threads and Processes 



Processes 

Prngram-sized 

Contend: switch rrtay be slower 

Difficult ID share data 

Owns resources such as files and memory 



Threads 

Funciion'Si^ed 

Context switch may be faster 

Easy to share data 

Owns stack space and registers 
only 
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Kernel Semaphores and Priorit>" Inheritance 

An (rxi:Tint>|p i>r;in rxtriuiiHl rriliiMl HiM.1itjn \s the manipula- 
tion ol'kiu iti'f ure mode. Critical mode (Operations siK'h i\s the 
addilion of a Hie to the directory rlatii oi a directory inode 
niust be performed atomicaily. Each inode holds a senia- 
fjhore which is locked and niil(Hke<l arounrl these entical 
operafiojis. 



The IIP-RT kemol ttses the simple seniai^hnre primitive.*^ 
swait(l and ssignslO (coiTesponding to Dijksl ras P mid V op- 
erations)'^ for process syiulironizalion, nuilUfil exclusion, 
^ruid atomic resource management. A .single 32-bit integer is 
used as a kernel semaphore data stnreture. This data struc- 
tnre sniit)oi1s (wci senuipiiore typ(^s: ccnintinj^ semaphores 
and piiority-ijiheritaMce seina[)htjres. WiLh an acUIitiotiaJ 



AuKiist \m\l [h'\v]vn^Piw:kitrd .UniuMil 27 



)Copr. 1949-1998 Hewlett-Packard Co. 




Lockeif Sems|)h0re 



Linked List of 
Waititig Thresits 
in Pfiority Otdm 



Fig. 6, A lucked c:ounlirig s^maphorf aiici waiting lliri^aris, 

level of lock and unlock rode and using a sepjirate integer as 
a counter; priority-inheri lance seniajihores caji aJso be usefl 
as the basis for counting seniai>bores. Priority- inheritance 
semaphores are described later iJi tins paper. 

The semaphore primitives ssjgnal m\d swait have the code lo 
inteiprel the contents of the keniel senvaphoje data staTic- 
tiu'e and aie able to fJifferentiate between comitingand 
priority-inlieritaiice semaphores. 

A comiting semaphore in HP-RT hokls a (positive count value 
when the semaphore is unlocked iind a resource is available. 
An swaitd operation on a positive- valued semaj>hore causes 
tlie semaphore to be atoniically decremented, and the calhng 
thread CTintinues execution. An swaitO on a zero or negative- 
vahied secnaphore (the resource is not avail able) causes the 
thread to block (suspend) on the semaphore. 

Wien one or more threatis are blocked on a counling sema- 
phore. tJie tiireads aie jjlaeed into a priority ordered linked 
list will) the semaphcjre heading tlie list. To identify a seuia- 
phore that is locked and has one or more waiting threads, 
(he sen lap 1 lore is set to the negative address of the first 
wiiiting thread (see Pig. fi). The sem and owner fields shown 
in Fig. 6 aie describe<i below. 

Ai\ ssignalO on an uiilocked or lo<;ked-\\itli-no-\vaiters eoiuit- 
ing semaphore merely causes the nonnegative value of tbe 
senuiphore tobeatomically incremented. Aji ssrgnalO on a 
locked semaphore with one or nioix^ waiters (onc^ that holds 
a negative t]irea<l stnttiure atkh^ess) causes the hi-st (higliest- 
iniorily) waiting [jrocess lo be imlinked Mid sehechilcMl 
Table II siunmarizes the different states of HP-RT ci>unthig 
semaphores. 



Tafale II 
Different States of Counting Semaphores 

State Meaning 

Q Locked with no waiters 

-Address Lfjcked witli waiters (The atldress 

|)oin!s to the ilisi I bread in tiie list of 
waiting threads.) 

> 1 llnkK'ked 

One drawt>ack of I his semapluae tnetbodolog.y is thiil thc*re 
is no clear owuersbip of a locked semaphcjre. Tlie set ond 
drawback is the risk of prionty inversion. 

Priority Inversion 

In most real-time operating systems, a priority-driven pre- 
emptive srbedulmg a[>proach is used. Thi.s s(iieduling 
met I tod works well wbeii a bigher-] priority tirocc^ss (or 
(inead) nm prec^mtM a lower-priority procc^ss with no delays. 
One iiut>oriant problem that sometimes hanijiers Llie effec- 
tiveness of this sc'heduling algorithm is the problem of 
blocking causefl by the synchronization of processes that 
share physical or logical resomces. 

The most common situation occurs when two tn'ocesses 
attettipt to access shared data. In a nonnal situation, if tbe 
lugber-prioilty process gams ac<*ess to tJie i^esoince first, 
liien good priority order is maintained- However, if a higiier- 
priority process tries to gain access to a shared resource 
after a lower-priority process has already gained access to 
the resoiuce, then apriority inversion condiliou takes i)lace 
l7ecaiise Llie higlier-priority process is regime d to wait [or a 
lowx^r-priority process to complet:t^ 

Tbe foHowuig example, which is loasely based on an example 
first described by Lainpson iind Red ell. ' shows how a prior- 
ity uiveision can occim Although tiie tenn process is used in 
the foilowmg example, the executing enfity could just as 
well be a thread. 

Let PI, P2, and P3 be tiuee processes arrimged ui descending 
order of priority. Let processes PI and P3 share a connnon 
data stniclure which is gu^u'tled by the binju>^ semaphort^ X. 
Fig. 7 imd Llie following sequence* shows the events that can 
lead to a priority inversion: 

1. F3 locks X and enters its critical section. 

2- Fl arri\'es, tir€»empls F3 and begins its processmg. 

3. PI tries to kx-k X, l)iit because X belongs lo P:l, Pi is 
i)locked. 

4. F3 again attenipts to rmlsh its critical section. 

5. P2 arrives and preempts P3 before it finishes its criticai 
section. 

G. Assuming there are no more preemptions at some point 
F'l finishes, tlien P3 finishes, and PI tin ally is luilj locked oti 
resource X and allowed to finish its critical sectloiL 

hi iliis scenario the diu*ation of Pis bk:)cking Is impredictat)le 
because other processes can show np before P'.^ finisbes its 
criticiil section ant! is able lo release X. 



/ 
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Fig- 7, A djne line illusiriitiiig 



Priority Inheritance 

The n let liaclo logy used in HP-RT to avoid the priority inver- 
sion problem employs priority- in he rilaixce ^jeniaphores. The 
basic concept of priority-inheritance semaphores is that 
when process P blocks a higher-priority procesSt it executes 
its critjcat section al Hie higliest priority level of all of !he 
blocked jobs. Process F returns to its origijiaJ priority level 
when it completes its critical section, whic-h then allows the 
highest-priority bk)ckecl process to execute. 

From the example above if PI Ls blocked by P3 then accord- 
ing to the priori ly-irdicritance concept, P3 inheritii the same 
priority as PI while it executes m its critical secHon, When 
process P2 anivcs ( whOe RJ Ls in its critical sectioiij it 
would not be able to preempt process P3 because Rl would 
be numing at a higher priority than P2. Thus, process P2 will 
nol begm exefutioii. When P3 Hnishes its critical section, 
process PI c:^m preemjjt P3 and run to completion. Then 
process P2 can liegin ejcecutiotu 

Priority-mheritance semaphores can beeonie quite complex 
when nesteci semaphore locks are allowed as Ihey are ui the 
HP-RT kernel. Not only must the current owtier and all wait- 
ers for a semaphore be known, but given the owner f>r a 
ptuticular seiuaphon\ the higbesl -priority waiters <jrall 
senia]jhores currently ow^ned by that owner ntust be knowm. 
Thjs allows the syst*nn to mimipulate priority properly ajs 
semaphores an^ rele^ised, Tlie priority must reveri to the 
priority of the cunent highest-priority waiter of all still-ovMied 
semaphores. 

To manage this <'omplexity and yet ret^un a single inteifaee 
and dala structure for semaphore operations, HP-RT uses 
tiie semaphore value --1 to indicate unlocked for a priority- 
inheritance semaphore. A value of or le is not apossiL>le 
thread stn icture address, so tJiis value cannot be conlnsed 
with the negative address of the first waiter of a counting 
semaphore. 

Two fields in the tiiread stmctme are used to differentiate 
between the various states of priori ty-in lie ri tan ce and count- 
ing semaphores when tiiey im^ locked. A c omiting semaphore 
tiiat is locked ajitl has waiters will have the sem 0(4(1 hi the 
first waiter thread holding the* address of the .semaphore 
ami an owner field containing zero (see Pig. fi)- A priority- 
tnheritanci^ stnnaplKire thai is locked rUid lias no waiters will 
hold I he negativt^ address of the tjwner thread, wliu h has a 
seni field with a value of zero (sec P'ig. 8aj, Lastly^ a locked 



prioritji'-inlieritancT seniaf^hore that has waiters will hold the 
negative address of tiie highesr-prioriry wmi iiig thread. This 
thread structiu-e has a sem field holding the address of the 
semaphore and an owiier field holding rhe address of tJie 
owning thread (see Fig. 8b). 

To keep track of the highest-priority waiters for all owned 
priority inlieritance semaphores, a doubly linked list contain- 
mg the higiiesl'priority waiters for each owned semaphore is 
attached to the thread structure of each setnajjhore owner. 



SeTnaphore 



(a| 




Semap NDre 



List ol Wsaing 
Threads 



tJsl of High est -Priority 

Waiters for AIE Semaphores 

Owned by Owner 




Semepiiore 
Owtter 



Semaphore 



Sgmaptiare 
Waiter 



ih) 



Fig. 8. IkiUi structnrf^H ?i.ssociat.e<! vnlh prTority-inhpnt.anct« soma- 

ptujfus. (a) A iDcketi scniapliorp with no waiting |,lu-eads. (b) A 
Jufkt'fi Lsenuiyjhuro with waiting tEi[i.'Lids. 
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EMecuiabIc 
Threads at 
Prmrit¥lK3 



32 Bits 




' 32 Words 



1023 932 

Two-Level Readv Mask 

(32 Groups of 32 Priariiits) 



Run-Quaiie Tftble 

The different states of priority-inheritance semaphores aro 
summari:^ed in Table III. 

Table III 
Dffferent States of Prioritv-lnheritance Semaphores 

State Meaning 

—1 ITiilocked 



-Address of thrciad owner 



-Address of highest-priority 
waiting tluvad (sem fielrl in 
hi gliest -priority waiting threari 
= semaphore address iiiid owner 
field = thread owner address) 



Locked wiOiont waiters 
(sem field in fJnead 
owner = ) 

Lockeci with waiters 



Process Scheduling 

HP-RT c\inenily ust^s 54 disthul [jriority levels with the abil- 
it>^ to extend sii|>poti to 1024 distinct priority levels. Half of 
all IIP-RT priorities are reserved for use by kernel manage- 
ment software. There is no explicit user program inl efface 
provided for placing a priority ai these resen-ed le\ els. Tiie 
reser\ ed priorities are mterleaved with the user priorities 
and are considered a '^priority boost" on a user priority. 
Thus, between any two user priorities N and N -^ I lies a 
priority N + boost, which is more important than prifjrity N 
And less important than [priority N + 1. Boosted priorities are 
used by kernel senice threads to provide service Just above 
the priority of the highej5t-i>rior ily rtxiuesting process, but 
not at tlie next highest user priority whit h may be in use by 
the system user. Priority boosting is also used for I emporar>' 
elevation of the priority of processes blocking on I/O opera- 
tions to maximize throughput. Tliis tyi^e of algorithm is only 
used in a user-specified portion of the overall priority range. 

Tlie HP-RT kernel intentally mattages priorities by convert- 
uig from Oie user i>riority jilus a possible tioost value to a 
run queue table mdex by using the fonnula: 



Fig. 9, DiJta sLrtictures for process 
schMuling in HP-RT. 

Internal Priority = (user priority) x 2 + boost, 

where boost is either zero or one. Hence, if user priorities 
raii^e bo in x:ero io 127, the infernal pi iorities range from 
zercj to 2-55. 

MP-RT maintains a run-queue table with one entry per int.er- 
ii;il [Priority Each etiti^' holds a ready thread lis! head and a 
list tail pointer (see Fig. 9). To detennine quickly the highest 
priority for which there is a runnable thread HP-KT uses a 
two-lfr^vel bit nuLsk called a ready uiask in wbicfi a set f>it 
indicates a riiunable Ihreafl. The toji level of the ready mask 
Ls one 32-hit word. Each bit in tliis word indicates diat within 
a set of 32 priorities, at least one threaci Ls executable. Thus, 
if as shown in Fig. 9 the high-order bit of the first word of 
the ready nutsk is set, then there is at least one tlireail in the 
interna! priority range of 1023 to 992 that is exectUable, The 
second le\^el of the ready mask holds up to -32 32'bil entries 
each of which iudicates whkh of these -^2 prirmties holds 
exe cut al I le t h read s. 

By using high-speed assembly language code to fmd the first 
set bit in the ready mask, the highust -priority thread in the 
nonempty nm queue can be quickly delennined. 
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Managing PA-RISC Machines for 
Real-Time Systems 

iothe HP-RT operating system, the interrupt-handling architecture 
is especially constructed to manage the high-performance timing 
requirements of real-time systems. 

hy George A- Anzinger 



The task of an operating system is to manage the r-oniptit er 
system's resources. Thm management should he done so its 
to give the best possilile performance to user tssks or jobs 
presented to the system. Haw this performance is mf asiired 
and valued differs depending on the task or mission of the 
system, Tlie (hree m^yor cla^sses of tasks or missions pre- 
sented to an operalhig system are timesitaic. batch, and real 
time. The important aspects of performance of these three 
classifications thffer, and, because they differ, require the 
operating system to use different algorithnLs to manage 
system resources. 

Time share 

Timeshare systems are usually rlesigued to share system 
resources with alJ contending jiror esses. 'Ilie rniyor resource 
to be shared is CPU time, which is usually sliced into small 
units (called time slices) and allocated to all run n able pro- 
cesses in a "fan" vvay, Various notions of fair exist aiirl have 
been used, bill in general, mmuible processes contend at the 
sarnt^ it^vel my prior ity for CPL' tune. Some (or even most) 
systems modify this notion of fair to give more time to a 
process that l^loeks olten and less to a process that is eom- 
pule bound. Some systeitis may also have preferred t>riori- 
ties for processes that rnn (jn l>ehalf of tht; system. Such 
processes may be handling printers, conmiimication lines, 
or other things tliat rixe sliared with several processes. 

Balch 

Batch systems ai'e usually designed to maximize ttie through- 
put: of (lie system. Tlmt is to say, they attempt to get the 
most work done in a given j^ericid of time. Such systems will 
not irsiially use a timeshare scheduling algorithm because it 
introduL'cs overhead that does not acid to lite desired re- 
sult — throujjhput. To help achieve maximum tlu-oughput, 
one popular batch scheduling algorithm is lo nm the job that 
has Uie least amount of time left to run. 'flie point is that 
batch systems tyijically do not need to make any attempt to 
share CPl ' time. 

Real Tune 

Real ( line systems, unlike timeshare or batch systems, are 
usually designed to run the most important process that is 
ready. Impoitance is assigned by the user or designer of the 
system, and (he opennir^g system has lidle or jHJtIiing (u say 
abou( it. Ill*' system designer (i.e., (he iLser who sets np the 
systetnj decides tlie order of process mipt>jt;ince and assigns 



priorities for all processes on the system. Tlie operating sy s- 
tem s job then is very simple: give ttie CPl' to the highest- 
priority process that is ready. Hie perfonnmice of a real-thne 
system is usually measured by Ihjw fas( it can resptjnd to 
events that cb^mge the identity of the highest -priority ready 
process. Such events aie usually external aiiii come to tlie 
system in the form of interrupts, but can also be iniernaJ in 
the form of processes that promote otlier processes to higher 
priorities (or demote themselves to lower priorities). Another 
major event that real-time systems must respond to is the 
passage of time. The indication of the passage of time also 
comes to the system in the fonn of an external mterrupt. 

FYom this discussion, it is apparent that one major measure 
of a reabtime system is how quickly it can respond to an 
interrupt. A response ennsistsof: 

• Recognizing 1 1 ^iU liie in(eiriipt is pending 

• Pit>cessing the intern(i:iT (i.e., decichng what to do about it) 

• Taking the indicateci action. 

I sually the indicated action will be to switch context u.} the 
process that is lo handle the interrupt. Context switching 
encf impasses (he at lions taken when cojitrol mexecniion 
moves froni one [jroct^ss to anollier as a re.snh otaji inler- 
rnpt ot^ sotne tK.ber event (see ''Context Switf:hing in HP-RT" 
on page 82 for more about context switching). 

From a system's poifit of view the response (or respunse 
time) is the time it takes the whole systemt to do some( hing 
(bat chmiges the en\ironmen( i( is morritoruig or controlling. 
From an operatuig system vendor's i>oini of ^iew the re- 
sponse stops when the user code gels control anci the oper- 
ating system's responsi\'eness is no longer key to system 
performance. 

While the system is desiiing with one intermpt and p repairing 
a response, it may need (o contend with (jther inteniiiJts that 
are less urgent. Tlie system nmst lake (lie lime (o de(ermine 

lliis. 

It is also possiijle that, at the time art intenupt arrives, the 
system is in a state in wliich Uie in(errupt system or context 
switchuig is off. The system needs to go into these stales \o 
protect shared data from comrjition by contending j>rocesses 
(see "Protecting Shared Data Structures," on page :VA}. Some 
systems protect themselves ;md t heir shared data by turning 
off context switching wlienever tliey ar*e in system ^ode. 

1 \ hjs includes the oparatjag sysrem, ilm u^ut iifipiiLiJtiun. and Ttie BxEerna! ijeviceis 
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Context Switching in HP-RT 

CantExt switchmg can be detinejJ as moving abruptly from uue area of code to 
another as the direct result of some influence outside of the proyram or programs 
being switched to or from UsualEy the context switch is the direct result of an 
mterrupt or trap fa trap is an interna! interrupt caused by some program aciivjty 
such as divide by zero or illegal memory accesjsl A conre^^t switcfi can also occur 
as a result of a program or thread blocking. In thfs case the operating system will 
context switch to a program or thread that is not blocked. These two different 
ways of generating a context switch have different overhead costs as will be 
explained beJow. One of the measures of a reaf-time system is how (ast it context 
switches- When used m this way the reference is to how fast one user process 
can be suspended and another user process restarted. 

To context switch, the operating system must save the from process's state The 

state cnnststs of aJI the machine registers tliat the program may depend m. After 
saving \he from process state, the to process's state miusi be restored. As a result 
of this save and restore, both the ta and from processes have their view of the 
world preserved and restored respectively even if diey are suspended for a very 
long tjrrte. 

For example, consider the case of a user program that has askad tor some device 
input The program will be suspended or bJocked on ttie device driver wasting for 
the device to respond with the desired data. While waiting, the operahng system 
will find some other program that is ready to run and switch tp it When the de^ 
sired data arrives, the processor will he interrupted and the operahng system will 
switcti control of the ptocessor to the waiting program 

As an exampte of a context switch that is strictly the result of an external inter- 
rupt, consider the case in which a time slice is exhausted. In this case, both the 
program being switched from and the one bemg switched to are interrupted as 
opposed to having to block and wait for a resource. 

From a system overhead point of view there are four different types of context 
switch 

• Both the from and the to processes enter the blocked state prog ram matically 

• The from process blocks programmatically and the to process is interrupted 

• The from process is interrupted and the Xu process is blocked programmatically 
» Both processes are interrupted. 

Because of calling sequence conventions, processes that are interrupted incur 
addttional overhead to save and restore caller registers. 

To take advantage of the savings possible when processes bJock programmatically. 
HP-RT uses a context switch routine based on this type of block. The extra work 
required when processes are interrupted is performed by code \r\ the system 
interr^jpt handler. 



This is not reasonable for a high-perfomiance re al4.inie 
system that is trying to switch contexts in less thaii liO [ts. 
For tJiese systems it is necessary to recognize and process 
intemipts in the 25-|.is range. This impUes that tlie inteniipt 
off time phis tlie inteniipt proc essing time must ise kept 
Ijelovv 21) Its. 

Tliis paper wiU explore tlxe problems a PA-RISC architecture 
presents lo real-time processing. These problems revoke 
iu-ount! tlie need for fast context switchii^g, interrupt haiv 
clling, m\(] repeaiahiliiy. Next, possihle solutions to tiiese 
problems will he djseussed, detailing t he solutions used in 
rhe HP-RT (real'time) opei'ating system, which mns on the 
HP 9fK)0 Model 742rt \T^IEbn5 board f oinpuler The hardw^uc 
^md softwaie components of tiie Model 742rt are described 
in th^ article on page 23. 



PA-RISC Architecture 

Th(^ RISC arrliitecttire is used to speed up CPUs by design- 
ing them so that eat-li instmction is simple and can be 
executed rjuickly, Tlu^ goal is usually lo have each inslnir- 
tiou take I he same autount of time to execute and to rlestgn 
the machine so that several instructions can be pipelineti. To 
get all Inst met ions lo execute iu the same time requires Ibat 
no (jne instruction can be complex* Operations that are com- 
plex and retjuire more than one instniction time iire either 
hiuidled by subroutines or by coprocessors. Coprocessors 
sue designed to nm intlependently allowing the main proces- 
sor to do other useful work while Ehe coprocessor does its 
work. For exauti^le, H(*s PA-RISC machines use coproces- 
sors Ui tlo Ooating-poini math. 

In HP's Px\-RISC processor, the following characteristics 
are iniporranl for real-time applications: 
« Memory' reference ijistrut tirHis eidier load or store and tlo 
nolhing else. This means that lliere is no read-nu>dify-write 
instruction, 

* Memot^y reference instructions may stall if the data is not 
aviiJlable. To help in this regar<lt a cache memory is used to 
speed up the average access to memory. 

* Since memory accesses are potential roaf lb locks, r*]2 general- 
purjKjse I'egisters are available as well as 27 conti'ol registers 
ajid 32 64-bjt-wide floating-point registers. This aOows the 
processor to keep most of the variables of in t crest in 
registers, avoiding slow memory access operations, 

* All interrupt context is kept hi control registers. 

Real Hme and HP's PA-RISC 

From a real-time perspective, the characteristics of HP*s 
PA- RISC That are of concern aie those that limit performance 
in tlie real-time sense. As discussed above, a real-time system 
must be able to change its muid (context s\\atch ) quickly. 
Tliis implies that the large context dissociated with a i>rocess 
can be ^i problem. Also, while changing context, as wvU as 
doing other things, the system needs to be even more re- 
sponsive to interrupts. This means we niust not turn the 
inlet riifjl system off foi' long times. In paiticular, we must 
not 1 urn it otf for the duration of a context switch. 

HP-liT is the result of porting a third-pany operating system! 
lo tlie HP 9000 Model 742 rt board level real-time computer 

As such, the porting team was constrainetl to work wilb the 
conventions existing in the system being porled. Likewise, 
the porting team was not empowered to change miy f>f the 
kmguage or hardware conventions tfiat, exist in HP's PA-RISC 
macbutes and the l IP-UX* host operating system. 

To take advantage of the best of HP*s PA-RISC processors, 
the port team decided to restrict the system to PA-RISC 1. 1 
aichitectures. Tlie 1 , 1 iirchitecture pro\ities shadow registers 
Urat allow system interrupt co<ie to be nm without sa\ ing 
any context (see "The Shadow Register Environment." on 
page:i4). 

On examining the way the system we were porting recom- 
mends that drivers 1 je written we fomid the follovdng: 

t LynxOS from lynx ftegl-Ttmg Systems 3nc, 
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• After ail mtemipt. the sj^steni enters tlie iniemipl senice 
routine. The roiitiiie should he written in C aiul should make 
a call to the operatiJig sj'stem fiiju'tion ssignaf and then reium, 

• Tlie function ssSgnai incTenients a counting semaphore, and 
if the result Is 0, the interrupt service thread is put in the 
ready list ^execution threads and counting semaphores used 
in the HP-KT operating system are descrihed in the article 
on page 23). 

• [f the new entr>' in die reafiy list has a higher priority- than 
the current proc^ess, a flag is set indicating tlmi a context 
swhch is needed. (Context caiinot be switched wliile in an 
Intemipt handler,! 

• When the driver's interrupt senice routine returns, the 
^'steni notices wtieifier a context switch is pending and if 
so takes the required action. If not the s^^tem just returns 
to the point of the intemipt. 

Tlie problem with this picture is that to call the interrupt 
senice rotitine the sj^stem has to save most of the system 
state. This is a lot of overhead for only one fujiction call 
and reUim. 

1'iie team decided that a better w^y to liaTKlle interi-upt 
senicing would be to code a companion ssignal function. Tlie 
new ssignal runs using only the shadow registers and still 
does everytlHug the original ssigraf did. This scheme allows 
tlie wtiole ss^gnai ciill to he made \\ithout establishing a C 
contexu whit h involves saving ami restoring the C environ- 
ment [see X' Bu\iroiinient," on page 35). However, some 
restrictions are placed on I/O drivers m that they have to 
make their semaphores known to the operating system. 

In sonu^ cases, calling the ssignaf fimction is almost all that 
an interinpt. ser\ice routine will du. It is alsu j>ossil)!e that a 
few lines of assembly code migiu lie rt^quired to cornpUM c 
the interrupt service routme. Such code might move a li>1e 
of incoming data from the I/O device to an internal l)uffer. 
For applications I hat have these kinds of intermpr.s, rlie sys- 
Eent provides tlte iibility to < all <ui assembly language inter- 
nipt senice routine. To keep overliead low, the asseitibly 
lauguagt^ interrupt routine is restricted l:o usuig tlie shadow 
registen^ mid no system resources. The system interruiH 
dispatcher calls the ssjgnal function if I he tissemhly language 
routine returns a uonzenj semaphore. 

Some 1/0 devices and drivers require full C-code internipt 
handlers. For these internipts, the system estahjislies a C 
context on an interriit)! control stack. In this (*outexf inter- 
rupts of lugtier |jrio! ily are tun ted on while the iui ernipt is 
processed. These routines can also call a limited number of 
system fuuclions. For example, the system time biise mter- 
nipt is handled by a C' interrupt handler. 

With three difl^erent possible iru.errupl kuidhng situations, 
the operating .system needs to have tht^ ability to decide 
quickly which intemipt senice routine to use. Usually diis 
is done Ijy tiUier a tublc index, in which the system deter- 
mines tlie nunhorl to use \ia a rutuiber that is an iiulex into a 
table of routines to caJl, or a case statement, m whi<^h the 
indicated method, again exjiressed as a numlu>r, is ust^i lo 
indicate whicfi code to execute. A much quicker niethfid 
I ban these two is to put the address of the interrupt .senice 
routine in the dri\'er's table stiut t tire. This also allows the 
system to be expanded easily to handle other interrtipl 
handler envii'onnieiils. 



Protecting Shared Data Structures 

Sirred data structures are needed in anyopefaiing system to keep track of tht 
resourees tlvat the system is sfianng among several processes. For example, each 
tffocess will need memofv for its cocte and data This rrmmofy ^^ a sttared fesotjfce 
and the management sHuctures must be accessed m a way Um wiH mji allow Ihe 
systefn to lose parts of ihs resource Orte method of keeping track of a resource 
like metrtory is to keep free pages of mecno/v in a free list When; a page trf mem- 
Qfi is needed, tt^e page at tt>e head of ttie free list ts removed from the list and 
given to the requesting process This removaf fand ns subsequent retyrnl must be 
done in an atomic operation with respect to the comendmg processes By this we 
mean that, as far as any process cares, the removal of a pege from tfie free Ifst 
happens as one mdivisibfe operatjoo. Otlierwise, a contending process coufd gel 
control and possibly get the same page 

The importance of maiolainrng atomicity m dealing wtth a shared resource such 
as memory on a free list is dlustraied in the following example. The process of 
removing page A from the free list involves 

I Picking up the pointer to page A from ttie list head 

2. U^mg the resultrng pointer to get the pointer to page B. which is in the first 
wanj of page A 

3. Storing the pointer to page B in the list head. 

II tlie removal is inten^upted after step 1 but before step 3. and the imerropting 
process also tries to remove a page from tlie free fist, bath processes will get tfie 
same page and most likely the system will fail Similar problems on returning of 
pages tolhe free list can result in lost pages- or even circular free lists. 

Tlie solution to these problems is to make a sensitive operation atomic with respect 
to contenders. If only processes can contend, ins sufficient to prevent context 
switches tor these p&riods of time. If one or fn'ore of die contenders runs on an 
intenopt, then interrupts must be disabled to achieve the required atumic nnnration. 

The HP-RT system supports thnee levels of contention protection: 

• loterrupts disabled 

■ Context switch disabled 

• Semaphore locking. 

from an overhead point of view, the cost is lowest for the interrupt disable an^ 
highest for the semaphore [ock. From an impact on performance point of view, 
interrupts should be disabled only for short periods of time. contfiKt switch dis- 
ah led only for slightly longer limes, and semaphores held as long as needed 

For short operations, such as the list removal operation described above, the 
internjpl disable method ts tfie best to use (even if tfie aiomjc test does not require 
this lovel of protectmnl because the disable time is short and the overhead of 
mterrupt disable protection is the lowest of the three methods. 



A New Interrupt Environment 

The need to deal with the three kif emipt handJing sitimtions 
described above and the requin;nicnt to handle iiiteiriiijls 
from the VTVIEliuy meant that we had to design anri irni.>i(e- 
ment a new intemipt handling r^nviioitinenl . Fig. I shr>ws a 
smiplifit^d view oniie logk-aJ [/(,) aiciiitecture tJiat the HP-RT 
interrupt handling subsystem is designed to service. 

The nature of the VMEbus requires a second level of inter- 
rupt cfisimtch. Tills is necessary l>ecau5e VMEbus inter rirfitfi 
come into (lie PA-RISC processor via one of seven hnes or 
PA-RLSC inreniipt levels. As showji in Pig. 1, each 1 4 these 
lines cm\ handle several independeni rlevjces, wltich imt)lit*s 
several inteniipts. 

The VMEbus slandtutl specifies that a device requesting an 
inlerntpl itnisl assert its re(|iiesi on tlic ijih^nupt line il is 
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Level 
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VMEbus 

Up to 7 
^ ^ ^ / I/O Device 
Groups 



Fig. 1. A kigiral view of I he I/O cin^liiiprturi ■ r \ 

systern is designed to wnik ^^Ith. 



VMEbus Devices 



using. Tlie intemipt responder sees the request ajid sends 
back sn iiiteirupt acknowledgment for that interrupt line. 
Each device usin^^ the same line blocks the acknowledgment 
signiU from being seen by defaces faith er away from slot Ut 
wJiile it has an interrupt request pending. When a device 
with an intennpl pencUng sees m^ interrupt acknowledge it 
responds l>y sending back an inlcrrupl vector. The intenripl 
vector is a data elernerK (byte or word) that Irlenf iOeH the 
interrupting de\dce and is used by Oie inten'upt responder to 
dispatch the inteniipt. 

The onginai plan for the Model 742n hai'dware was to inter- 
m])t dte PA-RISC processor when a VMEbus internijjt re- 
quest was asseited and to do the iidernipt acknowledgment 
when the processor attempted to read llie inleniipt vector 
This plan required the operal ing system to sliill in the inter- 
rupt handler witli the intemipt system off for aji unspecilled 
length of time because \TMEbus de\ices aie not required to 
yield ttie bus to a requester, making the actual time required 
to do ail operation on the bus open-ended. To solve tliis 
problem, the HP-UT team decideti thai (he interrupt vector 
should he prefetched by the hai'dwar*^ l>efore inteniiptijig 
tlie PA-RISC processor. In this way a VMEbus interrupt ctm 

I SlQl D m a VMEbus cardcage lypicaliy houses tha cafd or canJs that contain the VMEbus 
syg^fm .control I er and other resources 



The Shadow Register Environment 

The PA'RISC t I im piemen tat ran adrfed shadow registers to the basic machine 
archftecture. StiadDw registers am ssven regrsters tntn whjch the contents dF GRs 
(general registersi 1. B, 9, 16. 17, 24, and 25 are copied upon inmrruption The 
contents ol these Cfeneral registers are restorerj from their shadow registers when 
an RFIR (return from jriterruptron and re store) instruction is e^^ecuted 

The shadow register environment Includes code that executes betwe-en a proces- 
sor inierfupi end the following RFEft instrocilon This code is executed in HP-RT 

using only the shadow registers. It is importarrt to note that ihe nature of M$ 
environment is further defined by the nature of the processor's behavior on inter- 
rupt When an interrupt occurs the processor transfers control to the interrupt 
code with the foifowing state: 

• Interrupt system off 

• Interrupt slate cpNection disahletJ 

• Vrrtual rr>emorY system (both code and data! off 

• All access protectron off. 

Since the virtual memory system is off, all memory for both code and data must 
reside in and be accessed by physfcal addresses, Usually an operating system will 
put the interrupt handling code in an area ui memory that is "equi^/alently mapped " 
This means that the physical anrl virtual addresses are the same. This also means 
that code running in the shadow register enuifDriment cannot access memory with 
virtual addresses that are not equiveient sirice to do so would require the hard^ 
ware to rrtap the address using its TLB {translation lookaside buffer), t The hazard 
here IS that the required entry may not be in the TLB, which would cause a trap to 
the TLB miss handler, Since traps are a form of interrupt, the mtss handler would 
not be provided with the rnten"up{ state (because the interrupt state CDllection is 
disabled] and thus would not know how to return to the point of the trap. 

On the plus side, if the whole interrupt can be processed in the shadow register 
environment, the RFiR instrrjction is all that is needed to return to the point of 

interruption. 

t The Translarmn lookaside bi^er ni TLB is a hardware address trarrslation taljle. The TIB 
speads upvirtual-tp-fflial address tfansiations bv acting as a cache for reeenE Eranslalrons. 



be dispatched witJiout the PA-EISC processor having to wait 
for the \^iEbiis processor to fetch the intemipt vector The 
current hardware alw^ays does the interruj)t acknowletlge as 
soon as possible but lias the option of asserting tbe proces- 
sor jnlemipt eitlier immediately or on completion of the 
ijiiernipi ackmjwledgmetit. 

Fig, 2 shows the steps involved in handlmg a VMEbus inter- 
iiipt antl F\g, 3 shows a iiortion of the system iriternii>l table 
which is used fjtir handhng second-level VMKbiis irderriipts 



InterrupTlng VMEbus I/O Card 
1 Send [nterrupTto VMEbus processor. 

3. AckiiDwIedge itE lAK snd send an ^ 
intemipt vector to the VMEbus pra- 
lessor. 



VMEbtts Processor 

"► 2. Send lAK (interrupt acknovvkttge} ' 
message to tbe interrupting device. 

-^ 4. Stcire interrupt vector ai the arbiler 
address. 



HP-RT Dperating Svsteni Running fin e PA- RISC Processor 



5. Interrupt HP- RT. 



' 6. Decode inierrupt to determine which 
one of 32 tniermpt lines caused the 
interrnpL 

7. Use the result fron^ step 6 lo index 
into the HP-RT interrupt table { a in 
Fig 3K 

8. Sin c e th i s i ntef rupi i s ass oc^aied 
Wiib a VMEbus device, tbe second- 
level interrupt table is accessed 

I b inRg. 3} 

9. Tbe second-level code ( c in Fig. 3\ 
is res|iDnsible lor interpreting tbe en- 
tries in tlie second-level interrupt 
table. 



10, The code mentioned in step 9 per- 
fqrms the following: 

■ Retrieves the imerrupt vector that 
bad been placed at the arbiter ad- 
dress in step 4 { d in Fig. 3K 

• Ore ales an index to the inteniipt ac- 
tion pointer by ANOing tbe value in 
the mask entry \ e in Rg. 3] witb the 
interrupt vector, 

* Uses tbe index to find the bandler 
that will process the interrupt front 
the interrupting device ( i in Fig. 3 ^ 

» Transle rs ce ntro I te the ha ndle r. 



Fig. 2. An oxaniple ()f the V'MEljus interni]>t liandluig process. 
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Smgle-Level Irrterrufit 

TabletFotAtll/OEitcspt 

VMEbus Inlerruptst 




HP' EITIirternipt Table 

Indexed by the Bit 

Position in the 

Interrupt Word 



Semaphofe Address 



Driver-Defined Data 



Index I 



I itteiTupt Action 
Poinie; 



Intemijit Bit 



Driver Address 




Second-Level Intenupl 

Table for VMEbus Interrupts 

IT hers can be up to seven 

ol these structures J 




© 

Second-Level Code 



This group of entries is 
repeated 32 times (one 
group for eacli bit in the 
PA' RISC interrupt word}. 



Iflterrnpi Action 
Pointer 



At this point llie entries 
for first and second 
levels are the same. 




Return Value 



Semap}) ere Address 



Driver- Defined Data 




\ 



rig. 3. ThP HP-RT interrupt table siruciure. 

and non-VMEbtis interrupts. Note the correspondence be- 
tween the interrupt l.ahle stntcture and Ingif -al I/O arrhitec- 
tnre shown m Fig. 1. Tlie three differetvt iiilernt])f haiidling 
sititations mentioned above are taken rate oTliy allowing 
one of the tliree types of intcrmpt romines to he speeifled in 
the table (see the interrupt action eiitt^' in Fig. -J). 



C Eniironment 

C envifoprnent refers to ttffi impiied machine state w^ executing in a C langu^ 
progFam. Tl^is fi^chine siaie is realty a set of register use conventions fnst are 
defined m the software archjiectiffs for the FA-RISC processors I see Fig I \. Some 
Cff ttie basic assymptrons made m C about these re^ssier^ include 

• SegistBf 3(J IS the stack pomter and pomis at the fir$i avai fable dnutite vwd of^ 
the static The slaek grows with incnessing addresses 

• Just below tfffi turreni stack pojoter is a standard stack frame with room for the 
return address to be saved [if rhe caltee neaJs tn save itl and room for each of the 
call parameters to be saved 

• Registers 26, 25. 24, and 23 (as needed) contain the call arguments. If more than 
four arguments are passed, those above the first four arguments are stored in the 
stack frame, 

• Regisief 27 is the global data register and is used to address any global data 
needed by the procedure, 

• Register 2 contams the address to return to when the procedure is done 

• Registers 28 and if needed 29 are to contain the function result when the function 
returns. 

• Registers 3 through IB [the callee-saves registers! can be used oniy if they are 
saved and restored before returning to the caller. 

• Registers 19 through 22 (The ca tier-saves registersJ and registers 1 and 31 are 
a^ailabJe lu use as scratch registers. 

There are other conventions for floating- point and space registers which are 
usually net important in operating system code 

The shadow register environment, which consists of registers 1, 8, 3 J 6. 17, 24, 
and 25. is mst compatibia with the C environment. 



GflO 
GR3 



GRli 
GR19 



Zeri> (by Hardware Convent ion} 



RP I Return Pointer) 



Ca I lee-Saves Registers 



Caller-Saves Registers 




SPlSta^^k Pointer) 



MRP IMillicode Return Pointer) 



Fig, T Regjster usa convamians in the C envFfonmanL 



Second-level VMEbus intemipis are handled by reading the 

rettimed internJpt vector, maslcing il, and tising the resuh to 

ir^dex to tlie iiitern^pl action that will hanriip f lie jn|(^rmj>1 

( f in Fig. 3). Tho nuuslting is done lo prevent index inf( (o a 

location outside of the table atid tf> allow the intr^rniiitin^^ 

device to pass back status informal ion in the high \rdrt ol the l^ the largast value for n is 2bB 



word. The mask is ronipiited at system configuration time 
from the user's specificatif m of the high ntnnber to be re- 
turned on a given interrupt line. This niunher is rounded up 
to the nearest power of two (2^^). For example, if the highest 
number to be returned on a p;u1iculai- internipt line is 12 
then n is four because 2^ provides the nearest power of two 
greater than 12.t This results in a table that is larger than 
needed bid eliminates the need to check if the masked num- 
ber is too large, t^ntised entries iu br:th the first-level and 
secoiuMevel interrupt tables are filled with entries that 
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Fuitcimn II fCaller} 



Stack 




Caller-Saves Registers 

Values thai Dd Mat 

Nead to Be Saved 

Across Fufictton Calls 



Callee-Saves Registers 

Values that Must Be 

Saved Across Functian 

Calls 



Cafter- and Callee- 
Saves Regtster^ f or 12 




Fig, 4, Thf relaiionships lK*tween 
lum linn (tif proccuJun*) tails, the 
fr^lpr- ajid faJlfe-saves register^;, 
iiriti the stark urea. The taiihs 
puis data ii waists Iv preserve in 
the c: a] lee-saves registers befi^re 
making a <'alL If the calleil rfUiUne 
feallee) needs to use aiiy of the 
rallei^Siives registers, it saves ihe 
vahie eontaiiUHl in the ri*gLHtf*r 
and restores the value back into 
rhe legist IT bvUwv returning in 
the c^ien 



rt«iih in system illegal inTeiTin>T message.^ Mlioiikl sucli mi 
interntpt ever htippen. 

Itiilially, the HP-RTieajn vv;uu<ul the inierni|)l hiuufler iuvrl Ihe 
inlentipt off times lo be "blind" to interrupts for a nitiximtmi 
of 100 instriK lion times, inelmliiig any stall states iiiiiius 
caehe misses. Tlie notion of Ijlttid to inteirupts w^is itiiro- 
ditcecl lo cover the c'ase in which tJie system keeps the iiUer- 
rti]it system off, bitt still processes the interrupt in a tiniel>' 
Tashion. This oeritrs iti the ititeri'tipi hai idler, for extmiiile, 
when aftiT il priK'esses an inten'uiH it hioks al the pending 
inierni[>ls anti if h fiiKis one, processes it withuul luniing 
on tJie interrtjpt system. The operating system interritpt 
dispntrhhig code met the 100 ins! ruction lime lltitli, 

HandJiiig Large Contexts 

The PA'RISC im luteciure lUvides a program's contexi iiilo 
tw^o register set*?: mfler-srti^'^s atid eaUer^'SamH registers. The 
caller-saves registers consist (if rc^gistei^s llial me expeeled 
lo contiiin values that do ivol need to he presinved across a 
procedure call, that is. values the calling ftinction does not 
care about. Therefore, tliese registers aie available for use 
as scratch registers or for i)arameter piissitig hy the called 
routine. The callee-sayes registers ai"e used for vahtes that 
mnsi be preser\^ed across a i>rocedtire Ctill. Thus, if th<' 
called routine wantB to use a callee-saves register, it must 
first save it aj\d then restt^re It before it returns. Tlte PA-RLSC 
aix'hitectme also specifies where tliese registers must he 
saved on die call stack (see Pig. 1). This caller-saves aH<3 
callee-saves contention is used by the PA-RISC' coinpiiersso 
that the system can depend on ih 

IIP-RT depends on the caller-saves and rallee-saves division 
to keep context management code to a minimtim. hi particu- 
lar, on system calls the systt^ni saves otd\ the users ( CctHer's) 
rilimi atklress. glob^il register. *nul stack poijtier Tlte sysleiii 
call hatidler tlien caUs the retiuesied sy.stem call finiction 



depending on that function to save and restore any callee- 
saves registers it may vvmit t.c) ttse. Likt^wise, on inteiTupts or 
traps where t^ontrf>l must be transfeiTed to {]w kenic^l stack, 
f inly the caller-saves registers ni^ed to bv saved because 
lli'-RT depends on callee-saves re^istc^i^ lo he saved by iyiy 
function called. Tlierefore, since the context switch code is 
called as a function, all it lias lo save are the callee-saves 
legisters. By sa\ ing only what jieeds to be saved at each 
step, the system keeps the overhea<I h>w for registex saves 
and restores. 

HP-HT also takes advantage of tlte fact that the floating- 
point coprocessor is enabled by setting bits in a control 
register. If the coprocessor is not enabled. tJie system will 
generate ati emulation trap vvlien a proci*ss attempts to use 
any ficmtingtioint histructimts. Processes start with Ihe 
fif>aling-poin! coprocessor disabled. Wlicu a pt ocess at- 
tempt js to use floating-point instructions, t!ie code in the 
c^niulaticjtt trap handler saves Ihe old process's float ing-pomt 
registers and loads the cut rent process s float ing-t>oint regis- 
ters. In this way* the overhead of floating-point context 
switclntig is lin\iied lo only tlte times when it is needed. 

In cieference to niiiintaining a low interrupt -off time, the 
system checks Ibr pending intemtpts otice it has stored ihe 
old pi ocess s floating-j)oint registers. U'any external inu^r- 
iiipls are t)etvditvg at tins time, the system will stM ihe lloating- 
lioitn cjwnei^hip flags to show that the coprocessor is not 
owned ;md then handle the interrupt. Tlie euneni process 
will be redjsftatrhed still mit ownmg Uie float ing-pt>hit ct> 
[noeessor, but will iiumedialely end ii|j in the emulati*>n trap 
which will finish the cotvtext sw itch, i ){ cont^e the inteniipt 
coiiid cause the tMirrent process to lose the CPU, possibly 
even to the proc^ess whose state the system just saved. For 
ttiis r'eason. a flag is kei)t to show thai the registers were not 
r hanged so the process may proceed with only a quick pass 
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tlirough the eniuiation code to get the coprocessor biLs set 
agaiti. 

S&ljmp and Longjmp Sfjintion^ 

Uu nnv ycrasioiis the operating system is requirefj to abort 
a sysletn call. Hiis occurs when the user sefs up a sigi^al 
handler aiitt the .signal handler is speriliefl as requlniig the 
termiriattori of any system call tliat is pending when tl\e sig- 
nal is delivert^i. As mentioned above, the system takes arl- 
\'antage of tlie fact (hat functiom called on a system call will 
restore the cailee-saves regislers. Tliese registers are saved 
on the stack by each fund ion in tJie call chain, starting from 
the system call handler lo ihe code that dehvets the signal to 
the lisen Tl\e problem then is how to recover these registers 
so the user code will have the corre<-t register set wlien con- 
trol is returned to it. The nomtad way to handle this kind of 
situation is Uy do a setimp ciiK to save the caliee-saves regis- 
ters in n lociiJ buffer and tiien do a fongjmp call (which re- 
stores tiie saved registers) from tlie signal dehvering code. 
Tlie porting teatii decided that the overhead of a setjmp on 
eveiy systein call was too high. 

One solution that was considered was to identify all possible 
places in the kernel where such a signal could be rlelivered. 
C ode c otild then be titit in place to do a setjmp only when the 
signal delivery w^as possible. This approach was al>andoned 
when it wtis found that these caUs coiihi come from user- 
written drivel's. Tlie sohilion used is tf> unwind tJie stack, 
[jicking up each of the sa\ ed roi^isters tiiUii the stack is back 
I Q the s>^steni call haiidiei\ 1*tiis solution takes more time in 
tJie rare case of a call bemg aliort.ed, but does not put over- 
head in the path of all system calls. 

Hardware Help 

h was mentioned alirne th-M the \TVlEhus luudware holds off 
iolerrupts ttnlll the information needed to jirocess the infer- 
iiipt is availabte, ^Flie HP-in^ team also retjuested iuid re- 
ceived a real-time mode iu Ihe interrupt convention for on- 
board l^O device interrupts. 'Hte normal convention was that 
all onboairt devic e interrupts were collected into one bit 
(ench bit corre.sponds to ime inteiTU[)t lirie). ITtulcr this con- 
vvntion the .stjflware inlennpi handler would first decode 
the iiuenuj)! source to this hit antl then read aji I/O space 
register that contiiined a bit ntap of all the onboard devices 
requesting interrupt ser\'ice. Tht^ hardware eonvenlion used 
was to clc^ar (!iis register when it was read. Tliis required the 
scjftwait^ to keep track of all tlie bits that were set ^md to 
call the handler for eac^h bit . The software management task 
for thLs convent ion would have been fairly high because the 
real-time system wants the interrupt sSysteni on itvost of the 



tinie, which means that it is pc^^ible for another interrupt to 
be received from another onb*:»ard device before the ciurent 
intemiiJt is completely processed At the same time, the rest 
of tlie main processors interrupt register would not be in use. 

Tlie HP-RT team asked for an mtemipt mode in which each 
onbocird device lias its owti interrupt bit on which it can 
mtemipi the main processor This convention not only elini- 
mates ihe need to remember which bits were set, but aLso 
eliminates a level of decotiing in the interrupt path. 

Conclusion 

One of the main goals of the tIP-RT project was to minimize 
the time to handle intemipts. Table 1, which shows the Je- 
suits of tliese efforts, is a tiisk response time line that shows 
the time consimied by each activity in the path from an in- 
ternjpt to the task (e.g., user code) that does sometliing to 
respond to the mtemipt. For cases ui which mi interrupt is 
handled l>y an inteirupt sen k e routine in the ojjerating sys- 
tem and not user code, the interrupts disal>led and dispatch 
mten-upts times shown m Table 1 are the only times mvolved 
in determining the total task response time. Their worst- 
case times in diis situation are 80 ^is and 6 us respectively, 
giving a total task response time of 86 ^is. Tlie 80 us time is 
rare and work is continuing to reduce this time. 



Table I 

"nme Line for HP-RT Running on Ihe HP 9000 Model 742rt 

Tasks Performed 
After an External Event 

Interrupts disabled 
Dispatch interrupts 
Other interrupts 
Context switch off 
Scheduhng and switching 
Retmn frcun system call 
Total time 
I Tlirae intemipis 

t This tirriB js rare and is irt rads other Ihan the interrupt and tnntBxt iwilch cmje. Wort Is 
cnnrinuing to reduce This time 

HP-UX is based on and fs comparibla with UNI^ System Lahoraiones' Ul^fX*aperatirg systfm 
It also campliea with X/tens* XPG3. POSlX 1003,1 and SVID2 iiitf3rfa[3 specificarinns 
UWIK fs a registered tjademark of UNIX Systsm Lsboraiones list in the. IJ.SA atid nther couninBS 
X/Open IS a trademark of X/Open Comparyy liinited m the UK arid other countries. 
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Worst Case 








3 ns 
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45 ^xs 


L2fts 


4,6 \kH 


31.2 [IS 


230.6 ^s 



Aiipmt VMl lUw\mViivkmi\.hnui\iil 37 



)Copr. 1949-1998 Hewlett-Packard Co. 



The HP Tsutsuji Logic Synthesis 
System 

A new logic synthesis system has reduced the time to design ASICs by a 
factor of ten. 

by W. Bruce Culbertson^ Toshiki Osame, Yoshisuke Otsuru, J. Barry Shackleford, and Mo too Tanaka 



Logic synOiesis assists and automates the process of refining 
digital designs from high-level, ahstrart conreprions to low- 
level, concrete specificaticms for physical implementatjon. 
The HP Tsutsi^ji logic synthesis system, a software package 
that nins on HP 9000 Series 700 workstations, was jointly 
developed by Hewlett-PiKkard Lal>o rat ones in Palo Alto, 
California and Vokagawa-Hewk^tt-Packard (YHPl Design 
Systems Uiboratory (YSL) in Kunmie, Japan. Tsutsiyi, the 
Japanese word for azalea, was adopted as the name of the 
product hecause at the inception of the project, Kurume was 
hosting tlie World Azalea tvongress. 

Input tx> the Tsutsiyi logic synthesis system is exijressed as 
block diagrams composed ofadcieT'??, multiploxers, sliiflers, 
register files, and so fonh. Tsuisuji Lransforms these block 
diagrams into effjcient, electrically and functionally correct 
netlists.t w^hich can he implemented in varioas technologies 
(see Fig. 1). 

t A netiist IS a list of logic galas and the inttiFCaiiriectturi*;, called nets, between them, 

Bli^ch Diagram 



i^ 

^ 
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Fig, 1, T^iitsiiji is a hi^li-pt*rfonnaiice logic synthesis system. T)esigns 
arc f^xprpswed as Ijlock dJagranis, whi( h are rranstonned by Tsutsuji 
into a iietlisT file that can bp used by ^ar^i array nmnufaciurers to 
produce an application-specific intf?gratefi circuit (.ASIC}. 



Tlie most obvious benefit of logic synthesis is that it redtices 
the time needed to develop a new product. In a competitive 
market, the time needed to develop a product often has a 
greater inJItience on profiiai>ihty tiian tJie product's perfor- 
mance or factory cost because of its effect on the teclniolagy 
potential in the prodttct (see Fig. 2). hi addition to shorrenhig 
the (iesigii jjliase of tlie tieveloprnent schedule, logic synthesis 
can also reduce the debugging and testing phases by chmi- 
nating the errors that ine\dtably occur when a gate-level 
design is produced manually. 

A disadvantage of the tradit ional digital design firocess is 
thai <iesigns are niit captured precisely until they have been 
refiuefj to too low a level of aljst r action (Fig. la). At this 
I)oint, technological dependencies have been inti^oduccd m\d 
high-level fimctions (Fig. 3b) have been obscured. Experi- 
ence lias shown that these designs can almost never be re- 
used to take atlvantage of faster and cheaper technologies 
when they become^ available. In contnist , Tsutstyi accepts a 
high-level, techno logy-indepentlent design and autt^jmal ically 
maj.>s it to the target technology. Reusing an old design can 
be as simple as reiTmning the synthesis tools. Freed ttom 
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Fig. 2. Assiinie that the technolog^v potential, which inclucii s t hip 
( ost, speed, and density, grows exponentially. Then a pnyeit that 
can make it to market in one year ^vill be inipleniented with a tech- 
nologir that mU have four linies the tK^itendal of a project that takers 
four years tu ntarkt'i. 
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Fig. 3. Uf\sif^[is t(t;it iire expressed ilirtjclly in l.he tt*rlu]ii]ogy yf 
irnfjlemeiUarion (a) are often difficult ar impossible to remap eUet-- 
tivoly. Cor aversely, fiesignsj thai, die crested fj}^' It^gic s>TVthes]s froni 
lii|fli-level modules (b) aro InhereiUly emsy to reitiap. 

tlie tediouy knv-k^vel design tasks, a design*^ r can devote 
increased time to the nior'e profound system - 1 e%'el design 
issues, which can m(jre significantly iiilluent^e performance. 
Researrji into the tu1 of iiu|>leitienting a s|>ecine function, 
for exaniplt* a uiultipMer, needs to be performed only once 
(o eniljetl il inttj the logic synthesis system, after which it 
becomes avjiilabie to all users of the system. 

Logic" Synthesis 

The iniiiai focus eif T^utsuji is to asslsl the design of 
applic atian-sptHLific integrated drciu^s (ASICs). AvSlC vendors 
iypicalJy provide low-level tools for placement and routing, 
[iile rl lacking, and so forth. Tsnfsuji is intended to comple- 
mont HM<] augnicnl such tr>oLs rather ihan duplicate them. 
Thus, die output of Tsutsuji is the set of files a vendor needs 
to proiUicc^ an integrated circuit. 

After it is entered v^ith a graphical editor, the block diagiam 
describing the circuit is translated to a techno iogy-specific 
netlist in two sleps. Tii tlie llisf step, module generators, 
driven by patainclers siij^plied from the block diagram, ex- 
pand the blocks into a generic nellist of simple gates. At this 
stage, the gates have no restrictions on fan-in and fan-oul 
and aie essentially equivalent to logic equations. However, 
some modules such as nuiltii)hcrs can take advantage of 
liiglier-levc^l primitives like hill adders. If it is known at this 
slage thai die target technology contains these higher^evel 
priniitives, then the modules caji lie instructe^l to en;it diejii 



rather than the lower4e%'el logic gales. Ttns makes tlie task 
of technology moping substantially easier and quicken 

During the second step, a technologv backend nianipuJates 
die generic netiist into a new^ nedist diat satisfies the design 
rules of the target technologj^ (such as fan-in and output drive 
restrictions) and exploiLs Uie lechnoiogj s special fearures. 

ModtUe Generators 

The heart of Tsutsqji is a lifaraiy of module generators, each 
of which can translate blocks of a single functional type into 
a collection of simple generic gates. Tlie library^ contains 
module generators for all of the kinds of blocks that are typ- 
ically used to constiiict computer data paths ajid control 
logic. There are cunently about fifty modide generators. 
includUig; 



Atlders 
t'omparators 
Dividers 
Majority Logic 
Random Logic 
Selectors 



ALUs 

Deere menters 

Encoders 

Multipliers 

Registers 

Shiftei^ 



Counters 
Decodei-s 
Increment ers 
Mult iplexers 
Register Files 
State Machines 



It is important to stress that the iibrar>' is not composed of 
tlxeil designs, as are standard ceO and gate array libraries, 
instead, it is composed of generators that can produce an 
endless variety of fixed designs. Kor example, Ijlocks are 
synthesized with exactly the desired opei-and lengths. By 
adjusting the parameters given to the module generators, 
the designer tunes the syiithesUed circuit to aciiieve the 
project's cost arid performance ol>jectives. The speed of the 
synthesis (initress jjcrmits many design choices to be tried, 
with actual cost iind peifomiance data gathered for each. To 
produce a pioduct upgrade, the cmrent. design am be reused, 
with blocks regeneraterl using synthesis parameters that 
yield higher peifoniuiiice, Tlie new product is functionally 
equivalent to tlie first; conscx|uently, the need for simidation 
atul testing is reduced. 

Extensive literature exists describing the implemenEation of 
tlata path and control logic functions, and much of this 
knowletige has been incoqiorated into the generators. Often 
there exisi several aigoritlmis tliat can be used to implement 
a given InncliojL For example, the module library includes 
ripple-t'aiiy adders, carry-lookaliead adders, and conditional- 
sum adders. Multipliers can be synthesized nsing iterative 
cellulai- arrays or cany-savc mUivv arrays, Best of alf tlie 
designer needs little midersiaihlmg of the alternatives since 
all aie fiaict ion ally the same and since fast synthesis pi'ovides 
a quick comjj^irison of cost and perfoniiance. 

Example: Shifter 

Once an aJgoriduu is <:hosen, there often remain a number 
of stnictuiiil choices that can influence cost and perfor- 
ruiuice. As an example, a IG-bil imidirectional shifter will t>e 
considered in detail The sfiifler has Iti-bit input tmd output 
data buses. There aie also tour weighted shift-amotmt inputs 
and a shift-iu uiput. 

In the case of the shifter; die litnajy has only one algoriOun — 
the shifter will be inii>lemented as a collecdon of n-tol multi- 
plexers. On the o(h(M' hand, Iheie ^^ue nutny possible struc- 
tural arrMigernents of the multiplexers diat will produce die 
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Fig. 4. Ml *^ig[jt i)E3Ssii)|p orgaiiizatioiis for a lli-hil [inidiit^ctEoiiiil Kliiflerarp slinwii in rtiis lopolog^^ ^niph nirisiiir:. TTit:» orfifUiiKatlisns di?rlve 
from Ihe faciorixiiUniis (if UJ, thf l>i] whlth. Tlit* fat tiinzatkin (li 4 2) rpKUlt.s iti a shil'icr rornpased u\'i\ Ivve] nf li-io-l miiitiijlcxprs f^»llow(*d 
by a Ifc^Vf?! of 44.o-i ninltiplexr?rjf ariti rinally ffjllnvvcil hy a \mv\ cif 2-Tc>-I rnultiplt'xors- 



desirefJ shiffer. Fur example, the shifUuer>uhi be stnutured 
as oni" levt^l of sixlet^n 15-1(1-1 iniilliplexi*r^. or Iwi) levels, 
eat h rompuse*! of sixleeri 4-fu-l iiuilHpIexerK. hlnvh fador- 
Ir/dlkm of fhc iiumlier sixtetni yields a (iilferenl way l.u strne- 
ture the shifter. For exaitipics the faetorization (2 8) eoiTe- 
sponcls to a shifter with a level of 2-to-l niulllplexers and a 
level of 8-10-1 multiplexers. Fig. 4 shf)W*ri topology t^iafjli^; of 
the llrst-levoJ (generit- gates) iiiiplenientations trf all tnght 
pOnSsible organizations of a H>l)it laudireclitHtal shiffer. For 
km expUuialion of to]>olygy graijiissee ''Neilisi Topoiog\ 
Visutilization'' on page 44, 

Tabh* I contains tlata for a seieetion of stnulnres for the 
shifter. Thespeetl advantage of tlie (Hi) structure, wbirh is 
signifKanl in the teehnology-indejjeiTdent (generic gatt'.sj 
fomi, is not very |>ronoimeed aftt^r the (*MOS techiujitjg^v 
backend correiis the excessive hiii-in and fan-out. Good 
compromises between gale count and sjHM»d are offered by 
both (2 2 2 2) and (4 4); (2 2 2 2) may l)e favored in a tech- 
nology proiidin^ only two-input gales. Ilie organization of 
the shifter is spec ifled on thc^ nK^dules limir^g l>age. The tun- 
mg page is made visible by selei ting I lie nitJdide in die block 



(liagiam and then cUckhig on the tuning page hutton to the 
Ud'l of (he <lravviMg area Note in Table 1 tlini the ^4 4) organi- 
zation of I be CMOS shifter is only about four percent slower 
I ban the {Hi} orgimi^ation and reijuires only 41 percent <is 
tiKiny cells for implementation. 

To siuiimarize, nuxhile generators provide designers with 
custoin-|>roduced fnnctional blocks widi exactly the r't^quired 
ojjcraiid sizes. hesigner*s can t4i<Hise from ii large number of 
functions, tiiven a function, a nnmi>er of algorithmic um\ 
slnictiiral choices are u.snaJly available 

Technology Back ends 

The l(^( Imology backends perform two fimctions: optimiza- 
tion find mappmg. Optimization improves tlie cost find perlbr- 
niance of a circuit. Ma|)ping c<)nverts tlie netlist of generic 
gates produi ed by the module generaba's nitfi an elect rit ally 
coiTecl netlisi of gales that can he implemented in the target 
leclui(3log>\ Mapping is necessaiy because the module gen- 
eratoni use gates chosen from a fixed sel of functioits, which 
may lie different from those av ailable in the target lechnol- 
og>', .\Jso. the module generators assmtie gates may have 
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16-Bit Unidirectional Shifter 
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imliniitefl laii-in and fan-out. The leehnology backends billow 
Tsutsuji to re;ilixe an iniportanl goal: tJie ability ro irTiiiIeoienl 
one tie.sign efficirntly in multiple It'thnologics. 

Our experience yviih Tsutsiyi has shovtii that relatively simple 
liackends are most efhMiive, We hnve rrietl ol tier systems 
wtfli l\u- \i\tnv sD])hisli('ale(i opiiniixalion features. These 
.systems am eonsiderahiy iniprcne a poor (ieisign. although 
often the result still leaves nmeh tr> be rlesircHl, Fui vxmnplv. 



no sj'stetn we have seen witl eonved a ripple<-arT>^ a<iiier ro 
a eam-lookahead adder. However, if rlie design is nearly 
optimal to begin witli. rJien The best optimizers can inipro\'e 
It ver>' little. Fxirtliennore. these sj'stems are so slow, even 
working ori small circuits, thai they (iiscoiuiige the exy>er- 
irneniarjon iijid iterauve tit^sign ai*finiach that we wish to 
promote. 

Tsutsiyj tiesii^ns are. in fact nearly optimal before they 
reach the teehnologj- backencls. Because the implemema- 
tion of data-path struc-tures like adders has evolved to a very 
high art, ami because our mmlule gem^rators have taptured 
Ihat art. circuits prof iuced by the generators tyiJicaKy have 
excellent frui-in, faji-i*ui, and eost-perfon)iance chaiacteris- 
tics* For contra 1 hjgic. Tsutsuji uses generators that include 
rlieir own optimisation algoriiJm^s. Since these blocks tyi^i- 
(■ally contain relatively few gates, tlie opdniixation per- 
fonned by die mod ale generatoi^ is quick and effective. 

Tlie mapping and tjjjtjmization applied by the backentis in- 
voh e only small numbers of adjacent gates at a time. Thest 
triinsformations, tnlied pecphrdf optimizations, ran beper- 
ionued far more <|uickiy Ihan the global optimizaiiouH used 
m some other systems. Mosi of the ti'atssfomiations can be 
specified as mles. each of wliich is a pair of patterns. The 
desigri Is searched for collections of gates that match the 
first pattern in a rule. The collection of gates is then re- 
placed with the second pattern in the mle (see Fig, 5). 

A gate witii excessive fan-in must be replat*ed by tlie Tsiasuji 
backends witli trees of low-fan-in gates thai implenu'nl the 
same fund ion. To avoid ita reasing delay, nets on die ciittcal 
path should enter tlie fan4n tree at its root while nets with 
plenty of slackt can enter the tree at a deeper level. Fixing 
excessj\'e fatt-out is antilogous: the net with too many loads 
is replai'cd with a tree of luirfei^^ [ilus tlie original driver, 
which seiTcs tis the rot)t. In tiiis case, loads should be driven 

T Slack is 3 measure of how crirical the liminii is at a gate oj nat, with ?ero siMfc bain^ inDst 
cfJtical U IS defined as Uie tjiffBretictt bGtWEE»r] this tenglh ot the \m*$m\ path through ihB g^re 
or ner and the (engih of the cniical path 
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Fig. 5. \ i|t!imi^^itKni rulis arr piUfM */ iMlorrii^. If r tit! first riiiUrTiH^fa rule nifiUticK a rra^itH-nl (if lhiM[fst«njhi* frii^^rriPtt! is rcpkiix^d by 

tlie.Hi.^r(>iN| prjltcrn. (f:Ql ^ equaljlir 0]i]mis1H' n\tm.) 
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Fig, 6, A single gate with exces- 
sive fan-in is replaced by a tree* of 
gales by the t eduitihjg>' bacjceiid. 
Ill tliis example tlic fan-in limil is 
two. The shape of tiie tree and 
the pointst whf^re the nets enter 
It are carefully chosen to avoid 
IncT^asii^ delay* 



by gates at a trec^ depth not greater than the is hit" k tlirtjitgli 
the load. An algorithm has been deveiopt^d dial builds opti- 
mal fan-in and fan-out trees. Optimal in this ciise nieanw that 
no tree can he found tlial has less impact on the critic^ path. 
Fig. 6 illustrates the construction of an optimal fan-in tree. 

Human Interface 

.^ massive VLSI becomes more prevalent, a way must be 
found to manage the conip!exity of millioa-gate systems on 
a chip. We wish to elevate Ihe ilesigner's iierspectiveby en- 
couraging optiniizatioii at the system level rather than at the 
gate or transistor level. 

A great deal of effort was put into creating a system that 
would both encourage system-level thuiking ai\d synthesize 
and map designs rapidly. To complement this system, we 
wished to design a human interface that w^onld evoke the 
intuition and even the playfulness of the designer, Oui intent 



was that the designer would read the instnictions after using 
the system. 

Tlie antdogy that the YSL design team chose for the Tsutsiyi 
human interface wiis tliat of t lie engineer's design notebook 
(see Fig. 7). At a level above this is tlie ccjncepl of tlie librarj^, 
which is simply a collection of notebooks and component 
catalogs that cmx be used in any design. 

Design notebooks are broken dowTi into pa|*es. llxe firs I page 
is the index page, by which aD other pages can be m-eessed. 
As tJie design progresses, pages are autojnatically addeti to 
die design notebook. For example, in a hienirchical design, a 
number of lower-level components would be created. Each of 
these components aJon^ with ihe loi>-level design would then 
automatically be added and at^pear in the index. Subsequent 
[)ages would be added to reflect tl^e resiUts of technology 
mapping, timijig^ ajuJ tniH>l<jgical analysis. 




Fig. 7, Tsutsujt presents the 

i]< sign as an engmt^er's desiuii 
notebook- At the level above the 
notebook is a library coasistinfi of 
uther notebooks ajid component 
catalogs. 
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Block Diagram Design Entry 

Nearly aJI ^substantial dt^yigiuy start out as block diagraiiis. We 
have chosen ttiis natural form of expression as tlie principal 
form of design specLfication within Tsutsi^ji. 

The design is entered by metins of a block diagram drawing 
editor Ttie erUtor tiUowi> the designer \o create, copy, move, 
delete J and connect grapliical block diagmm objects freely. 
A iilock diagram oi)ject can be a wire or bus comiecting two 
or more modules, a module^ or even a list of logic equations. 
Objects cm\ be readily copied from odv(*r l^lock diagrams in 
other design notebooks. To conned modules, the df^signer 
necil only point at the approjiriate connexion points ajid 
Tsutsiyi will automatically route the Mne. Modides that 
are already connected can be moved and Tsutsitji will 
autoinatically reroute the connections to tlie module. 

riienirchical designs can be created by entering a design in 
the nonual manner and then putting ifu^ design in the design 
book where it can accessed via the Tsut.si\ji index page. Tsu- 
tsi^ji automat iirally constructs a symbol for the user. How- 
ever, fastidious users who want a more distinctive symbol 
can use the drawing editor to alter IJie symbol shape- 

Twining paiiimetet^ for modules are specified liy first selecting 
(lie module wiili the mouse tind then clicking on the tuning 
[jagc button to (lie left of the tirawin^ aiea. A spc^cial page 
for the selected module will appemand then tlu* parantelers 
can be entered (see Hg. 8). 

Cert^n niodult^ such as bus distributors, carry-save adders, 
and rrmltiplexers require^ a differeul symbol fJepending upon 
their configuratiom Rather than force the user to spcflfy the 
shape for each conllguration, Tsut-siyi hiis a class of symbols 
that are mutable — the form chiuiges as a functif)ri of ihe 
tuning parameters (see Fig. 8). 



Fig. B. Tl\e tuning page for a 
modal* ^ in accessed by *^electlug a 
module with the inouse and then 
clicking on tlie tuniitjg page button 
to the k!fL of the drawing area. 
Some isynibols such as the carry- 
save adder autumaUcally change 
their form as a function of the 
tuning parameters. 



Textual Design Entry 

Usually the <iaLii-path portion of a design is mosl uaturaHy 
expressed graphically. Text is sometimes appropriate, how- 
ever, for specifying the control portion of a design. Logimi 
Description Format, or LDF, is the 'fsut^iyi language for 
speci lying designs textuaily. LDF is similar to the C pro- 
gramming language^ so it looks familiar to many users. 

To use LDF» the aser places a box in the graphical design iuid 
connects signals to it. Witli the mouse, the iLser then executes 
a commanf! t bal causes an edit or window to appear. By typ- 
ing LDF text into the window, the designer specifies the 
function of the box, 

The t1rst two examples in Fig. 9 both spe<:*ify the same func- 
tion, an adcier, but di> so itsing two different features of LDF: 
random logic and trut b tables. 

The first line in Pig. ^a hsts the four signals that connect the 
adder subdesign to the rest of tlve design. The last two of 
tliosc^ signals iu^e prefixed with an ampei>^;uid to indicate that 
tiiey are outpiit.s; t he first two are input.s. The third line, 
wtiich begins wit) i tfie worrl net, creates and names two wires, 
wliich will be internal to tlie sulidesign. Oilier interna] signals 
will be created auttiniatically \[ they are needed If) implement 
Llie random logic expressions. The line carry = a Si b;, as one 
tnight exj:)ect, creates an AND gate, connect.s Its output to the 
signal carry, and eormects its two mputs to the signals a and b. 

Fig. 9b shows a tnith table fr>r aji adder plus LDF t ext that 
implements the tnit.ti table. T!ie truthtable feature in LDF is 
merely a textual structure for expressing a truth table. 

The automaton stnictiue in LDF allows the user to specify a 
state nuicbiiie, l\ consists tifa list of states. For each state^ 
expressions aregivr-n ihv ifte outputs, and conditions are 
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Randafn Logic 

flddsr (p, h. &:^um, &carry) 



( 



netlDcaf nel IJocaT ne\ Z 

Cdrry - 3 & b; 

lucal niii .1 = -a & b; 

locaj Ret_2 = a& -h; 

mm = locai ngi 1 1 local (tit_2; 



(■) 




adder In, b, &sum, Scarry) 
iruitiiattle a, b: mm. carrv 



{ 



{ 



CB&eO. 1: 1,0!; 

case 1. V. 0, 1, 
delBult: 0. 0; 



m 



SiftteMachifTg (a, b. ntxt, &Otil| 
i 
9uu>n)Blon { 
STATE_ft: 
Out = D: 

ir (nexlf golD STAI1_1; 
STATE 1: 
Out = a a b; 
goLoSTATl k 
) 



h\ 



Fig* §. MnsI design piitry is done* ^raphifi.iity in Tsiitsnjr. Howevoi; 
same portions nf rlpsigns nrr^ nn:>re nalunilJy exprt'SH<^rl um^g text. 
Tsuisuji p^JVi^l^^s l.hr LDF lanj^iiiige for I his imq^"^^' ^lis figurp 
givers \Uwv exaniislrji; t)f KHF: (a) specifies some nitnbintilinna] logir 
ro iinplf'niPMT <in add it, ^ij) di^sniljrs diP ^iiw* Mtldir Ubiiiga (rutli 
talile, iind {c} specifies a simple slale macliine. 

given for changing to other stales. Fig. 9c jllusTrales a niniiile 
state niciritjne with two states. 

Netiist Topology Visualization 

The l.o|>olog>^ giapli is a new means we developed tor \i«^w- 
inga gate-levei de.sign. Unlike a tratiilional schematic, a 
topologj^' gr;ij>li nni <hsplay a large desigiv in a single window 
and can niakt* th<' [>erronnance ehaiac lenslics of the cirrnit 
eaay lo tmdersland. Tlie 1oj)oli>gy grajiti also makes it easy 
to tracts liie automalicaily generated gates bark to modules 
in the user's high-li*vel design. 

Fig, 10 is aj^ example of a topology graph, C*ircuit inputs are 
placed ill a cohunji t)n lite left side of the iCrairh. Tlif* horizon- 
taJ coordinate of a gate is set lo hv i>r{)])ortjonal to thi^ delay 
of the tongesf path from llie input^f^ to tlie gate. Regisiers ap- 
pear twice on the diagrani. They are dra\Mi first in Ihe input 
cohnun with only the register outputs sliown (register out- 
puts are inputs \o Itie logic gales). They aijpear again with 
only the register inputs drawn at the right-hand endpoint of 
one or more paths through the circuit. Circuit outputs ^so 
appear at the right end of paths. 



A straight line is <irawn between two gates if an output of one 
of the gates diives an input of I fie sillier. The l>righiest colors 
are tised to show comiections with tiie lowest slac*k. For ex- 
anii>le. the critical path in Fig. 1(1 is drawn in yellow This 
enitjhasizt^s the part of the circuit that limits the siie(*d, wliich 
is usually the part of the ciicuit the designer most wants to 
see. Berause delay infoniTation is inlicrently gra pi i -oriented^ 
we havt^ fount J this graphical presentation of tlrlay in forma- 
tion io he ajT tnionnoiis improvement over the tiaditional 
textual delay report. 

Tsntsiyi users tyiJirally make tiieir high-level designs fun<*- 
tioniilly con'ect before they bother to examiJTe their designs 
at the gate levef C)ncv the design is function tilly correct, 
there rart^ly is any need to look at the gate-level flesign in 
detaih Nevertlieless, the lo[jology graph program includes 
features for scrollitig to any ])art of the design and >jooming 
to any riesired level of detail 

A particular gate can be selected by clicking with the mouse 
or tyjiing the iiajne of the gate. Tlie green circle in Fig, 10 
indit ai<'s a st\it'< ted gate. Once selected, the gate can be 
brought to the center of the screen and magiufied. A pop-up 
window of information tiiiout the gate can be requested; it 
gives inlbrinatitjn like the type rOid nmiw of the gate, the 
gates ftm-in iuid fan-tjtii. the slack at the gate, and so ftjrth. 
The tree of signals driving tlie selected gate and the trec^ fjf 
signals driven by the selected gate can be highlighted, as 
shown by the red portion of Fig. 10. 

Once a gate has been selected, it is possible to re<|uest a 
pop-u|) window showing the niunesof the gates that drive 
and are driven by the selected gate, { -licking on one of the 
names causes the corrtisponding gate to become the se- 
lected gate. This makes it easy to navigate through the 
desigiT, following the circuit's intcR'onnections* 

Wiien the tiser tyjies a name into a mod tile selection win- 
dow. tJie named modtile is then highlighted, as show^n in red 
in Fig. 1 L This allows the designer to coiTclate blocks in the 
high-level design with gales in the gal e-level (tesign. The 
usiT can also retiuest a pop-up window of infomialion about 
lite selected module. 

The abilit>^ to sec a particular high-level mod tile v^ithin the 
topology gratjh of the entire circuit is invaluable for setting 
modult^ tuning piua rue lei's. F<tr example, ilu^ tiesigner might 
use the mouse to select agate on the en tic a I i»ath. From Ihe 
gate infonnation window^ the user w^ould knini the module 
from whi(*h tln^ gate was synthesized. Thcn^ the user would 
select that rntidnle to highlight it on the toi>ology graph. If 
llu* module wt^re roiitribuliug significant delay to the design, 
the user might rettJne the module for higher perfornianc^e. In 
another scenario, the user migtit select a module that was 
not on the critical path and retmie it foi a slower l>ut 
ch eai>e r i m i ) 1 e n ventati* >n . 

Simulation 

To achieve our project goal of substantially increasing 
designer productivity it was imperative to tievelop a fast 
sinnilator for Tsutsuji, Traditionally, simulation has been a 
process for verifying designs that were nearly complett-. 
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ConifmleiT: were I ell iinattriided for hours or days while 
si mill at inns ran aiul |irodiued reartts offjaper. We Wiuiled 
the Tsulsuji smiiilator In aid Ihe early phase.s of design, pro- 
diicinj^ results in real f itne and presenting I hem in the eon- 
text of the application. We wanted designers to be able lo 
experiinenl with sij^niricant design changes and see the 
eifeeLs instanliineousiy. 



Fig. 10. Tho topoto^* ^mph lets 
ii Tsut stiji user viow m\ en tire 
i?ate-level desij^ on a stngliji 
s<:n?en. Signals fluw froni left to 
right m the diagrjirn and tho long- 
eii\ i>aths horizontally have the 
mosf rlilny. The crilicaJ paths arp 
colored yellow. A gate has be*>n 
select p(i as indicated hy the 
grt^eu eirrlp. Many fpatiirt^s of ihp 
to|Hj|ogy graph pn>srarn relate to 
the selected gale^ in this case, Ihe 
fan-in and fan-out trees for the 
selected gate have been high- 
lighted in red. 



A pre\dous YSL |>n>dut I incltided a sinudator that evahiated 
al>oiit a thousand gales per second. The Tstitsiyi simulator 
has ac^hieved simidation rates as liigb as twenty-three million 
gate evaluations per second.! Some of this increase Ls tlie 

\ this was rTH3a-5!ired wfi^le sunulatmg a snOO-gate Hoaitng point multiplits^ using an HP 9000 

McKlei 730 computer 




Fifi» 11, In \h\ii tiipology graphs i\ 
nainp tias been typed into the 
ff[gh|igh! Module prjp-np window. 
This causes all the gate^ and in- 
[erronnedions wllhin the nameii 
nitifhilr |^> hf* higlilighted in red. 
A Modiilf? InformsKon window displays 
infiffinatinn aiuHJt Lh<' liighlightpd 
ninduk'. Tiu' aliilily to see Ivow 
one nK>dij|(^ is stttKiled within Ihe 
c^niire topology jL^raph is useful for 
fjiHting the module's funing param 
eterH. P'or example, if the critical 
path flows Ihrnngh the niodi3lf% 
the designer rnay vvani fo Uinv it 
for higher SI H't'd. Conversely, if 
no (Tiliral paths flow ihrou^h fhr 
rnodnle, 1. he designer may wan i in 
mne it for lower mst. 
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result t;if an impressive leap in workstation perfomianct* thai 
oec*Lirretl between the releases of the two produiLs. Several 
other factore also contributed. 

The most signififanL factor was the development of a special- 
pur[)OHe compiler that produces efrieient simulation i;ode. 
Much of tlie work performed on each sirtnilMlirMi cyele by 
the previous simulator is now perfonned onee during the 
compiling phase. Also, Tsutsuji produtres cireuj1.s that a<ihere 
to strict design rules that make it possibU* to sinuilate the 
circuits accurately with a much simpler sinuilat ion si rate gy. 
For example, the delay in the circuits can he coniplelely and 
quickly characterized by a separate static timing analyzer 
program; hence, the simulatfjr can ignore all timing issues. 
Since Tsutsiyi circuits use simple eloeking ;md two-state 
Boolean logic, eac*li gate only rveerls to he evaluated tmce 
per simulation cycle. A gale typically can be evaluated by 
a single, simple, machine-level instruction on the host 
computer 

Wlien the user wishes to simulate a design ^ T^utsuji dLsiilays 
the graphical simulation window. The user can choose buses 
!.o ohserv^e mid cmi sjjeeify virtual instmnienis lor driving or 
viewing values on the buses. Tsutsi^ji then automatically 
nins the simulation compiler and starts the simulation and 
the virtual instrument^;. The simulation program aiid the 
virtual instnmients rmi as separate UNIX'-' processes tliat 
pass vectors through UNIX interprocess conmiuni cation 
channels. This approach provides a flexible means for usei-s 
to add new virtual instruments. To do so, the user needs 
UNIX prograjnming skill but does not need to know iinything 
£tt)out the intenuil stnicture ofT^jutsiyi. 

Simulator Register Allocation 

One of tJie interesting algorithms developed for the simula- 
tion compiler is tlie legister allocation strategy. Computers 
store data ui memory and registers. Registers are scarce and 
fast; memory is abundant and slow. Register allocation at- 
tempts to nuninuise the movement, of data between memory 
and registers and to maxiniia;e the amt>unt of ( alculatiou 
that is done in registers. 

One of t.h(^ tlrst (hini^s f iie compiler does is transform the 
netlist into a list of instnjcUons for a simple, idealized com- 
puter. These instructions are similar in function to instnic- 
tions executed by real computers and me simplified mostly 
m tJie way tliey refer to data. Many optimizations that, are 
complex to perfonn on re;il ctnnputer instrurtkms r.im be 
performed easily anfl efft'ctively (jn tlie simivlified instruc- 
tions. The compiler removes the siniplitlcations in several 
stages untd, finally, the simj^jlitled instructions beeome real 
computer ijLstructions. 

IVpical ICs have at most several hundred input and output 
signals but have thousands of mtenial signals. In the simula- 
tion program, the values of the internal si gnats iire sti) red in 
temponuy variat>les. In the list of instructions^ there is a 
point where a temporary variabie first appears mid m\other 
point w lie re it is last used. The number of instnjcMons bi:^ 
I ween these points is called the ! Uptime of the variiil^le. 
Storage (memory or registers) can be used for multiple 
variai)les if their life times do not overlap, 

A temporary variable is often used in many instructions. The 
first few instrucdons calculate the value of the varial:ile, while 



the rest use the value to caleulale other values. Ttie number 
of instructions tliai use a vaiiable is {'ailed Oie nifevmwe 
count of the variable. 

A variable's Ufctime and reference count can be used to 
measme the desirability of storing the variable in one of the 
scartre registei-s. U the lifcthne is long antl thc^ varialile is in a 
register, then many other variables are prevented frf )m using 
I lie register. Hence, a long lifetime tirgues against putting a 
viiriable in a register If a v^Hiable has a higlt reference count 
and Ls stored in a register, I Iven many time-cxmsiuning memory 
references are avoided. Thus, a liigb rererencc count .u-gues 
in favor of storing a variable in a register. Combining these 
ideas, we define the cost of putting a variable in a register to 
be tilt* variable's hfetmie divided Ijy its re fere nee connt. 

Our register aUocation algorithm attempts to store low-cost 
variables in registers. During register iillocation, the c compiler 
passers sequentially over thi^ instruction list. Wl\en a variable 
appears for tlie first time, il is assign et! a regLster if ILs cost 
is low and a register is available; otherwise, it is assigned a 
location in memory . Aftc?r a temporary variable appears; for 
t he last time, its storage becomes available again. 

One question remains: how should low ( f>st be defined? 
Rather than try to choose a specific ibresboUl tt> separate 
higti ^md low <:ost, we use an adaptive strategy. VVlienever 
the t*om pi ler tries to allocate a register to a lownr-osr v^ui- 
able !>ut finds nonc^ available, the thresh rjld is lowered. 
Wlvenever a high-<osl varialile is assigned to memory mid 
registers are available, the threshold is raised. 

Our register allotration algorithm produces simulatif>n code 
that nms almost four times faster than code that keeps all 
variables in merciory. Yet, it is simiile mul requires minimal 
time iuuj tiiemory whiie compiling. 

Virtual Instruments 

By providing a set of versatile virtual instruments, we hope 
to move the designer closer t.o the application domain and 
away from the Boolean logic domain, l^esently. Tsutsuji 
includes benchtop acce.ssoiles mid Instruments that range in 
complexity Irom a simple on/off switch to a network ana- 
lyzer. Tliese are all instruments that the user can interact 
with in a real-time fashion as the simulation is progressing. 
The Mgh speed of the simulator makes the c(jricept of virtual 
Lnstniments practical and allows the designer to tiartlcipate 
in an interactive environment. 

Probe. Probes are automatically atta< lied to ail primaiy inptit 
mul output nodes when Tsutsuji is placed uitcj simulation 
mode. The user cmi optionally comiect prol>es to internal 
circuit nodes to aid in monitorlr^g mid debugging. 

Switch, The switch (see Fig. 12) is a simple one-bit uiput 
]3ort. It iJtovides a convtnuent w^ for designers to interact 
witli I tie Itjgie simulation. 

Constant Generator. Tlie constant generator (see Fig. 13} is 
the equivalent of a potentiometer comiected across a fixed 
voltage source mid feedhig an mialog-lo-digital converter. 
Ttie degree of quarili^aiion of the constmit generali>r is auto- 
matically deteniuned t>y the widtl) ul" the bus to which it is 
comiecled. JiLSt like a laljoratory pf)tenti(inieter, the constant 
generator has coai"se mid One attjast nienis: the outer ring on 
die knob is the coarse setting mid the inner ring acts as a 
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Fig. 12. Switches are a simple way for the user Id int<>ract wilh and 
control th*' .^muIatiWL Ttie svyitch is activate by use of the rrtouse. 
Tiie nanie of the input pan Ijf fnrrips ihf^ title clisplaj-ed on ttie 
switch paneL 

vemien For exact seltmg, the user can click on the displayed 
viiiue with thp mouse mid then type the vdiie from the key- 
board, Tlie outjiLJt can be cJuinged betw^een two's comple- 
ment and Luisigned by clicking on the selector button. 

Function Generator. The function generator (see Fig. 14) is a 
meai^ of applying stimuli to the smiulator It is modeled after 
a t^onvcntional atiaJog signal generaton Multiple vadable- 
period, ^^ariabie-aniphtude waveforms are available (e.g., 
sine, triangle, sijuare, ramp), Data can also be read directly 
froin a file. The function generator's output bus vvidth (i.e., 
quantizittion) Is determined aii(<irnatically by the width of the 
bus to wiuch it is connected. The binary output of the func- 
tion generator can tie pri-scnted in either ujisigned or twos 
complement Ibrm. An additional useful feature is that tlie 
output of one generator c-an be used to modulate a sec-ond 
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Fig. 13, The constant genera t^r jutiVjdes a means for the user to 
v3Ty inputs to die drcult wliile the simulation is under way by sim- 
ply turning a knob. The refjioludon of the output is autoinatic^y 
deteniimed by the mdth of the hus to whk:h it is connecttHi. Tlie 
output can be presented in either twos c:omplenjent or unsigned 
integer form. 

one to create complex waveforms. Tlte modulation includes 
amphtude, frequency, phase, and simple stmmiadort 

Data Viewer. The data viewer (see Pig. 14) is a multimode, 
multichiirmel data display Lnstnitnent. Each channel c^m be 
mdividually contigured to display data as a convetilionai 
logic analyzer, as an oscilloscope, or in hexadecunal format. 
Each cliar\nel can represi^ent the data as twos complement or 
unsigned. The trace speed is viiriable and can be o]jtioi;aJIy 
controlled by jin external sync piUse. The data \iewer auto- 
tnatically increases the number of display channels as more 
input buses are connected to the mstnmient. Changing the 
size of the window automatically rescales the data display. 
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Fig, 14. Several htnttior] genera- 
tors c connected to a data viewer. 
The icij:i iraee shows an amplitude 
modulated waveform su|>pliecl by 
[lif lap two futuiion generators. 
I'he function generator at ttie Left 
is supplying the modulation signal 
for dre generator to its riglu. The 
second trace is a frequency mod- 
ulater! waveform .suppliert by the 
two hitiction generators in tlie 
renter, The next four tr^tces show 
sine and friauglt^ waveH iji both 
o.scjllos£'ope mode at id logic 
analyzer mode. 
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Fig. 15* The aelwork aiiaJyrvfT provides a swt^pi-frt^qyeiuy signal Icj 
analyze a ciTcuiVs fr^querifsy response with ri/speti i^j Ijoth phase 
aiiil gmi. 

Network Analyzer. The miwork attalyxer (see Fig. 15) anto- 
iiiiitically ct}iiii>icey a rirc uil's rrequeney rej^poiiye m It- mis of 
l>olJi pliase aiid gaiiu llit^ histnuTienl [irovlrips a signal whose 
fifqiieiicy is swept between iJie stall ajid stup frt*queiK4es as 
indicated on Ihe front |>anei. Tlie st^aJe of the display can be 
varied, as can the nature of the sweep (linear or logaiilhtnicj 
and the nimiber ot samples to be taken al eatb step. 

Pixel Viewer. The pixel viewer (see Fig, 16) provides the user- 
with a virtual color CRT that can he configured io aiiy gtH>nie- 
try and pixel size. There are a nimiber i>f types of pixel view- 
ers, but they fall primarily into tw^o ckisses: Ihuse that accept 
a stream of pixels to be wiitten in raster fashion tuul those 
that allow individual pixels to be addressed and written. 







Fig. 16. Tlii^ pixel viewer provideij the user wtlh a virtual 4ok>r t'RT 
Mili! i ;irfc Ih iunlJMUrc'd io any ^f ojiiom' at id plxvi ^ho. 



Examples 

TsuiMiyi is now Ijeiug sold in the Japmiese market by YUP. 
('ustonier>i have usetl Tsuisi^ji to inijjlement a wide vaiiety 
of ASIC.S ranging from digital sigmil processoi^ to eontxol- 
[(^i-s io digital *1'V systems. Tlie kugest design t<* date has 
17(1,000 gates, although Tsutsu^ji (vm e^isiiy haiuile designs of 
one-h^lf inillioM gates or more. The following oxatnples illus- 
traie bcjw Tsiitsuji rc^adily involves tbt* user in tlic domain of 
the apphiation. 

Television Decoding Filter. Many Tsutsuji customers are in the 
business t^l desigoiiig television receivers. Pig. 17 illustrates 
how Tsuisuji CAM bi* used ttJ make fundanvt^ntal design tleci- 
sliuis during the i'mliesi stages i>f liesign. The exanij)le 
shows im experimeul to ronipaie two TV decoder litters. 
One tllter is less exjH^nstve to build than tJie other but pro- 
duces 1( jwer-ftuality res u lis. Whether t be less-e^xpiMisive filler 
woukl be good enougli is an aesthetic question thai is almost 




Fig, 17. ht i.lns exuinple, Tsut.^uji 
u;iN used io t ortipare Iwu I ele vi- 
sion [|er<ider lllters. A design w^ls 
rii^ated thai iiKihided i^oili filters. 
I Hiring Miiu ubtion, iKiih filiers de- 
< mipd the ,siiiu* inuigf^ pnMhjf ing 
The two iimtges on the ri^hi side 
of tlu^ serei'iv. 'fhe desiguer eould 
rfion roitipan- theru with Ihe orig- 
iua] iitijj^tv, in IhtMeuitr cif ilie 
senHMi, and eiiunm' ihc- hkksI 
sij>pr(Ji>ri3te filler. 
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Fig. 18. This serepn s^rms a de- 
sy^ for aji inia^e proc-i'ssjng rhip 
tluil was (it^igited witli I^TJtsi^i. 
T\w tk^igrier spent two hours en- 
teritis the desi^i, which was then 
automat iraily syriOiesizH into 
mm CMOS Hate -drniy < nils in 
less tluiiv a iiiintJte. Actual 
Images, apijnipriaie iri tiie image 
prcxressiri^ domain, were used 
whi^n sifitularing the ilvaij^. The 
upper two i)ixc* I -viewer virt.tMl in- 
stnimeitls show the Input imaj^es; 
the lower viewer sht»ws the 
hlertdetl iniaj^e produced by tlie 
Hinuilalinii. 



impossible to answer without looking at the iruagcs the filter 
would procluce. TsutsLyit witli its Iricndly smiulalion onwon- 
tueiit, provided ati ideal means for answering Uiat question. 

A design was entererl ioioTsntsuJi that huJucied both fillers. 
A sivi It'll, labeled Se!, h^s the user s wit th betwt^en the two 
iihi*t>( duihig sirnnUition. The lunelion genenilor to thi^ left 
of the switt h in this exaiiii)]e infTely reatis the original 
iiiiagt* Irorn a file iiiici feeds it to Uw siintilatiuii. The iiuiige in 
lire center of the screen is the originaJ image before* etieod- 
ing imd deeoditig. TJie tall iiixel \iewer on the right ^lisplays 
I be OUT put of the siniuhition. The iiistnitnetir labt^ed viewer 
has bec>n piaced in oscilloscoije mode imd shows ib(^ inpnl 
NTS(' ttHevisiim signal, tlie signal after it is decoded uMa 
<*hroina and hnninance (C and Y), and 1 be signal again after 
it is dec^oded into red, green, and blue, 

Tbe simnlatinn was stalled with I he switih set to select the 
low-ctiKtlily filler. 11ie tlecfjded ima^e began filling the ouljiut 
t>ixel rhnver. ( hue an enlin> iinag*- had been sinndated, the 
higb-(iiiality filter was seleettHl and cmolher image was di7mn. 
Once botfi decoded images were (X)niplele, fbe aser t tmld 
(^onij);u"e them with Ihe ongina! and make a welt-infomied 
decision aixnh wliicti llherlo btiihL 

Image Processing ASIC. Hg. 18sbows an hnage compositor 
ASK' ihal was designed nsin^ Tsulsnji for an image process- 
ing syslem. Tbe cotnp<jsitor ASH/ merges two inpnl images, 
tnciducingone outpu! image. Tbe images are tnergtHi using 
one ofhvo intjdes, hi the llrsf mode, tbe intmt images luv 
lre;ned as I bough I hey wei<* transjjarem, and tbe output 
image is a blend of tbe two images. In the second niotle, I be 
iJipui itnages are consitlered lo be opaque. If fwrj objects in 
the two iiijnit imagers overlap, theu die (jbjen ihal is closest 
lo the viewer is shnwti m the oulpiii image. The image pro- 
Classing system includes a tree of jdenticiil romi>ositor 



ASK.'s, The tree lias much tlie same function as an individual 
compositor ASIC except that it {combines many images (not 
jtist two) into a sitigle image. 

Fig. 18 sfiows part of the c^ompositor d€\sig!i and the result ijf 
simnlathig the tlesign in its bleiuiiug mode. The siiimlation 
inputs mid ontjiuts are viewed as images so thai the designer 
w][[ mil her waste lime intert^reting ttie simulation nor risk 
misintt^q>retjug ib ^Vhrev pixel-viewer virtual inslrunu^uts 
ctui be s(*en. The I wo u|)per viewers show the input images 
ami tbe Ibinl viewer shows tbe blended result. The sitmila- 
lioii, which recinired evahiatitai of aboin ulJUOgates for each 
cif the JHJO pixels in the output image, was c(niipleted in less 
than a sin -on d. 

The eomt>osUor design vv^is entered into l^sntsuji by an inex- 
perienci^d dt^signer hi two hours. Tlie ciesign consisted of 
approximably thiity higlelevel mothiles. The high-level de- 
sign was synlbesizetl into a di'sign at I he generic* gate level 
in twelve seeontls. It took an additional thirty-eight seconds 
to accomplish the following: I be tlesign wjus mapped into a 
commercial CMOS gale iuray library, tbe mapped design 
was translaled into the II le lomiat thai I he gate lUTay vendor 
accepts, and an i^xilianstive delay mialysis was performed on 
tbe cireuib The resulting design uses 859*i gate array cells 
and Uifil/Opatls. 

Low-Pass Filter. Fig. 19 illustrates a logic synthesis session 
Ihal has progressed to Ihe point cjf logic sinuilation The 
example is thai of a simph^ low pass filler brstead of tbe 
streatus of om^s luul zeros dial are nonnaliy assiK iated with 
logic simulation, we see wavefonus— iin appn>priale fonn in 
w^hieh to view tbe inpui and outptil of a digital filler 

The ilbistrab>d low -pass filter takes a percentage of tlie 
previous input and sums it wilh one miniLs thai percentage 
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Fig. 19. A sLin{)lp lnw-pu.ss filter 
design exumpie. Tlie function 
M' nt niEor tin thp k^fl provides a 
high-frc^qof^ncy nigmil la hi^ Eitlded 
ro I h«.^ low-frequency .si^jiai of the 
riiTtctfon ^enf ratter <in the rifiht. 
Tho itlLer will rf.'move VHryiiig 
anioiints on his high-frnquentiy 
.sjgn^ ii^ d riiiu'Lion nfOtf jvprcpuf- 
jiftp feedbtit^k. which Is coiil.rolkMJ 
hy the rnrisUifil gt?rierdlfjr. Tlu- 
[ogic simiilsiUun Is perfornicti at 
Ltie gale level so the rcal circtiit 
mil pprftjrm exactly aij tibservra:! 
on tlif: darn vipwor. 



limes the eiirreni uulpul to IVirni flip ripxi fiutpiit We can see 
that the nityor (ieyigii paremieters arv indeed pimuiielers, so 
the designer t^an, for example, explore the effects of Cjuanti- 
zation by t -hanging the input bus with.h i>;minieter ajid then 
resyrdltesiiciiig the design— a process thai lakes less than a 
minute, Hie other majt)r|)iiran\eter is the percentage of the 
previous output ihsed to compute the next output . Rather 
th;m labonoiisly type the constant and one minus the con- 
stant for each trial, the designer has added hardware to the 
circuit to compute these two vahies. The constant can tlicn 
be apphed from a constant generator and varied ui real time 
while the siimdation is progressing. 

After the design has been simulated to satisfaction, the final 
synthesis can be performed. Here, the actual binary con- 
stant selected during sinnUation will be entered. There is no 
need to remove the superfluous atltler Suice both of its in- 
puts are now consiimts, all of its gates will be removed by 
the optimizer. The mu]tip>liers will alstj be iiffected by the 
optimizer, since each multiplier h^is a constiint as one of lis 
inputs. The fmtil task is tl^ien to select a parlicul^u' technolog>^- 
speciJlc library ;md perionn the teclinology mapping, P<jr 
this example, a nine-bjt filler, the initial synthesis resiiJteil in 
a design of 140 1 gates. After mapping mid optimization, t lie 
design was reduced to 649 gates. 

In this example, a designer who was fajtiiliar with filter de- 
sign (but not necessarily familiar with muUiplier design) was 
able to enter and syntiiesize a design for a low^-pass digital 
filter in about ten minutes. Subsequently, different bit-width 
designs were explored by simply changiJig the l>us width 
parameter To observ'e tlie effect of the feedback tt instant in 
real time, extra liardw^are \^ as added to the desigti to save the 
designers tinie. This hardwiu-c did not penalize the design 



because it was later completely removed by the optimizer In 
iin hour tiie designer was able to intuitively explore literally 
dozens of designs without becoming enmeshed in the intri- 
cacies of gale-level design. Essentially idl of the (iesigner's 
creativity and intuition was focuseti in the application 
domain. 

Conclusion 

TsutSHJi is a product from YHP in Japan that provides a set 
of fast and efficient tools for logic synthesis, simulation, iind 
design visualization. The ^aphictd natiire of the hiunan inter- 
face aUow^B designs to be expn^ssed (juickiy by the designer. 
Rapid synthesis and nuipping encourage the designer tt> ex- 
plore^ the design space interactively in search of an optimnni 
system configimuion. Applymg creativity w^here it will have 
the greatest impact, the tlesigner remains focused in the 
application domain, knowing that oi>tinnzation and mapjung 
into the chosen technology will be aiiU)matic. Designs 
pro<kK-ecl by llsutsuji are inherentiy reusable. 
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Designing a Scanner with Color Vision 

The challenge for personal computer imaging today is to duplicate human 
color vision, not only in scanners but also in monitors and printers so that 
colors look the same in all media. The HP ScanJet lie scanner uses a 
proprietary color separator design to provide fast, single-scan, 400-dpi, 
24'bit color image scanning. 

by K. Douglas Gennetten and Michael J. Steinle 



The rnnclion or a dt^skloj) Ssraniipr is to digitize ;m imagp or 
a tlocument arui seiitl i\w iiil'oniiatkjii to a toiripuler, a rac- 
siniile card, or a printen This allows liie digital infonnaliDii 
Iti be processed, prinled, and stored for nrx*liival pur[»oses. A 
desklop scanner c^in be usee! for luaiiy dirre^ieal Jot> huu- 
lioiis and must be able to scan various l>iies of dot unienls, 
iihot.ogra])hs, line-ail drawings^ iun\ l[iree-dimeusi<jnal ob- 
jects Ihal may be placed on tbe scanner ptalert The wide 
variety of material thai can l>e scanrKxl pn^sents cliallengps 
for the s(;yirung (tevire. 

HP ScanJet lie Scafiiier 

The IIP SciuUet He scanner is a 4(MKlot-per-inch (dpi) flatbed 
scajincM' with black and while, color, an<l ojitical chiiracter 
recognition (OCK) capabilities, 11 is eoiniiatible with PC's 
and Apple Macintosh eonipulers and with desktop publish- 
ing, presentatii>n, and text ret ognifion aj>tilicabojis, li offers 
fasl siri^Ie-pfiss scaiiriirig, etisy-lo-usi^ s<)llWfin\ piiiif patli 
calibration, a legal-si^ed ])lalpn, HP ActuPagt^ ipcbnology 
for lext scajming, aiid law rosi. Print, |>ath calibraiion opti- 
mizes the quality of the fmal output by compensating for 
differences in output devices aiid softwaie aj)pli<^ation.s. HP 
AtciiPage technology, when combined wiili a stjftwLue ap- 
phcation that svippoils it (such ^is C'aere's (OmniPage Profes- 
sional 2.0), uses special page recognition techniques and 
auioniaticiilly set.s the intensity to Improvt^ acdtracy on text 
with noil \v [hie backgrounds. AccuPage also includes logic 
thai joins l)n>keii t harai ters. 

The ScanJet lie provides 8-bit grayscale and 24-bit color 
scamdng capabilities. It uses an SCSI (Small Computer 
System hiterface) for Macintosh etimputers and a dedicated 
SCSI atlat>ter for Pt'-c ompatible^ and MicroChannel PCs, 
Optinnau Imghtness and contrast settings are selected auto- 
jnatically. Cusi<jm scaling is available in one-perc ent in( re- 
nients. tJnlint^ help provides reference and tutorial infonna- 
tion. An optional dot iiment feeder h^mdles up lo 50 [>ages 
automat i tally, 

HP DeskScan Ih the image scaiining software included witJi 
the HP ScanJet lie scajiner. lias a layered nser interface for 
both beginning and expert users. Advanced functions are 
easily accessed as pull-down menus or floating tools. Image 
editing software is included, and a live jireview feature 
shows tilt* it'SulLs of thangcs immediately on the st reetu 



Color Science 

The experience of color is tmiversal, trai^scending cultures 
and oce^ms. This i^xj^erierK^e always has one common ihreatl: 
there arc three dementis in the ext^eriencf of roior vision. 
Tlie first element is a source of illumination, the st^cond is 
an object being illuniinati^fl. and the third is a detector to 
measure the rHTeiled ilhuuinalion timn the object. 

UluniinaLioii 

Humans and many but not all animals see electrontagnetic 
energy falling be I ween liKl and 700 nanometers as pisiblf' 
ftght. Any energy witliin this range radiating from an obji^rt 
will inlluence its color appearance. Sources of ilhuTiii\at ioii^ 
whether natural or miin-niafle, are channieriiced by tlieir 
sprtirfil pifH-fiitish'ihtitiotf. that jsh their slrength along the 
dec (roitiagnelic cniergy si>eclmin innweeji 400 and 700 
nanometers. Tlie nature of this spectral distribution can pro- 
ton n<tly effect the color of an illuminated object. A common 
illustiatlou of tills is the color shifts that oc^cur mider tung- 
sten street lights. An extreme example v^^ouJd be laser light: 
alt objects ttiat aie not black are red wiien illuminated in red 
laser liglit. To have a gocjd color observation envir-oument, 
the source of illunhnation must be bromlbuitd, that is, U 
must contain a relativi^ly Hat and liroad s])iMtnirn of energy 
over tlie range of visible light. If any art-^iLs of i ho s] jet i mm 
are weak or missing, it will not be possible fo illuminate 
those portions of an t>i>ject's aperiml irjhHttmce diaiacter- 
istic- The lluoreseetU bulb in the HP ScaiUet lie is ilesigned 
with a iniKlure of phosphors to produce a broad spectrum oi 
lighl energy. 

The Object 

Photons from the source of ilhunination arriving at the object 
caji be affected in one of three ways, Ttiey can be ir<uismitted 
thrt^ugh the objeeL> reflectetl from the olijecl, or absorbed 
^^ itliin the (jl>j*^ct (ajifl reradiated as heat on in the case of 
lluorescence, reradiated as light of aihffeiTru wavelength). 
Reflerlion is mtist relevant to the hunuin ex|>erienc(^ of color. 
Colored objects are characterized by their spectral mflec- 
latt ce d is 1 1 i b u Hon. A vast variety of spec t r a I reft ectance 
disnibutions are found in the natural world. 
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Objects viewed with scanners such as The UP Sc anJel Dc are 
usually in ihe farm of dot unicnts. (hi the case of the IIP 
Sc^anJet He. a noteworthy exception is llireeKiinieiimioniil 
otypcts. Tlie ScanJel lies lllnnimatjoii. oprics. and single- 
pass color sepaiation make it uiuiijually capable as a three- 
dtinertsional objetl st^aniien) C i>k>n> fuiiiid on documents 
are usuiiJly gerieraiecj w\tl\ offset -preNs inks or photogniphie 
dyes. Thesi^ colorants eome in four \'arieiies: cyan, niagenia. 
yellow, and black. WitJi only these four colors to work witli, 
veiy few of the spectral reflectance curves found in nature 
can be even approximately rcprtKiuceti Fortuiiatcly, ixT-ause 
of a phenomenon in liuniatt vision called itieiamrnsm, tJiis is 
not neccssfirj. WlUiout metamerism, any picture containing 
grass woultl have lo be created with chlorophyll lo provide a 
matching colon 

The Detector 

hi the rase of humiui vision, aJl of tlie infinite degrees of 
fiieedom found in an object's spectral reflectancp distribution 
are reduced to only three dimensions. This is the root of the 
phenomenon of nietanuTisni. Because of this, colois can 
til ways be described with just three riiirnhers. For example, 
a color can be described by tJuee numbei^ representing 
amounts of red, green, and blue. The same color c£ui be just 
as precisely and unrnnhiguoiisly descrilied ijy niinibeis rep- 
resenting its hue, satmatiou, and lightness. Any of several 
other three-dimensional color systems could be used as well 

Like die human vision systeju. the Imman heaiing system is 
a spectral waveform processor, llnlike tlu* vision system, 
however, the heailug system retains all tjf the spectral con- 
ten I of audible sounihilHhe way to the I j rain. This provides 
a very impoitaiii capacity: when one listens lo a chord 
played on a piano, t>ne ciui easily tlisceni the individual 
notes composing die chord. Also, from the ciiarader of the 
soiitid, ]{ is obviously a fjiano cliorti rather Ihan an organ or 
fltile chord played frtjin iluvsamc mMes. An t^xperi ear can 
even lell the bnaid ;md sometimes die vintage of the piano! 
hi stark contrast, the eye caimot see chonls, A white t>aper 
illuminated with a ypllow light can appear exactly the sajiu^ 
as Die same pat>er ilhuniuateil wilh a uiixtnrc of green and 
red lighl. Tlu^ st)pclral conlenl, ohsetvahle with a scientillc 
iiistnuuenb c^ur be radi< ally different while theappeiuaiire 
is ideTitieal to a hum^ui. ll is this mamtnolh simphflcation 
{loss] of inlbnualion thai allows us to rcproduct* the ctjkir 
of grass green exactly with only four \\\ks or dyes, lidortu- 
nately, there is a eakh. This exact tualch is, striiily speak- 
ing, guaranleeti under one and only one type of illumuialion. 
More* on this later. 

From Man to Machine 

Sc^anners like the HP ScanJet lie bring the gift of sight to 
cotnputers. Pr<ulut ingany eohir intake rapture ik^victvsuth 
as this n^quiri^s a p;nlial dupliraliui] of ihe huniaji vision 
sysicm in the form oreluclronics and replies. The cenUal 
task m this eflori is the accurate dt^scrifjlion ol the hunuin 
vision system's method of converting spectral energ>' itiio 
three dimensions (jf coUu\ This was done wwiwy years agtj. 
Around WM), primarily lor I lie jncipietu color jek^vision in- 
dustry, a grout) <>f peo[de were tested for their sensitivity to 
monociu-oinatie wavtienglhs over the visihie spectrum- 




500 BOO 700 

Wavelength \nm) 

Fig. 1. TIE s^faitdani tih^en^er ( nlur ititifrhijig tain^es. 

Eacit person acljusted the intensity of du-ee ligltts until a 
match of the test wavelengt h was acJiieved. A series of such 
matches produced a set of thret^ cuitcs calle<l the volor 
matclting functions. An averaged set became the intenia- 
ttonal st^indiu-d called the ilVl sUindard obsen^er (see F^g. 1 ). 
These muves fonn the liasLs of color television mui the HP 
ScanJet IJc. 

The color matching hincl iojis of the standard obsen-er can 
Ix- eon verted into ;i new atid e^iually valid set of three curves 
by nmltipiyijig the original curves by a 3-by4 tnatnx. The 
lis. Natitinal TelevisioJi Statidards t'ommittee (NTSC) 
adopted t)Ue such set of curves lor use in color television 
(see Fi^. 'I']. This NTSC siaudarrl is used fre(|uently hy Ihe 
computer grafihics induslty mul was ehosen for du^ design 
of the HP ScanJet lie. To achieve a spt^ctral sensitivity 
matching the NTSC curves, a coui hi nation of the spectral 
eharac I eristics of all the optical eieuK^Jits must be consid- 
ered. For the ScanJet lie this iiuhides the document glass 
])lateru Ihe larujj, die lens, three color separaUon fdtei-s, 
three mirrors, and the plujiosensilive charge-coutded device 
(CCD) ilelector. To duphcale the bmnan colnr sepaj-ation 
proe(\ss, Ihe net combination i>f all these elements nujst pro- 
duce three color channels I hat are tlirectly related h^ the 
standard observer tlirougli a 3-by-3 matrix operation. 

The curves siiown in Fig. 2 jlltistrate the ideal c^amera sensi- 
tivities for NTSC color television. Note the pjTsem*e of sev- 
eral negative h)l>es. Because cjf these loi)es, a perfect cmn- 
era would require more than three tk^ectors (adtUtig one fur 
each negatiV(^ lobe) and in taci tlie very high-end broadcast 
cameras often have five or six deled ors instead of the three 
found in hojm^ video cameras. The inabiliiy \i> inchide nega- 
\{\'v kibes slightly diuiiiiishes Ihe accuracy of Ihe color sepa- 
ration [HXjies.s. rhis degratiarion rilso exists lor < olor hint 
Tlie result is "instrument metanterisin": some colors that 
match when viewed by a human obsener do not n\atch 
wlien viewed by die instnunent, and vice versa. 
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HP ScanJet Tic Color Separation 

O]' nil of I he elemeiiLs along I lie tJptit'al palii of Lht' HP Scan- 
Jet rif\ tlie lamp aiid Ihe niters liave ttie most conveiuentiy 
alterable stjeelral behavior, ajid in Hie case of the tlit hroie 
filters, this is very restricted, Beeatise of i he color separa- 
tion metliod used (see ""(tolor Separator Design," page 55), 
each color channel has access to three mutually exclusive 
bands of thf* color spectiiun. The cunes in Fig. 2 (anrl any 
other set of color matching cur\i*s ) contmn a great deal of 
overlap. Some wavelengths mv visible to more tti^m one 
chaimeL Only a small ariTOunt of overlap is possible with the 
method used in the ScanJet Ifc, resulting in a sli|*lu degrada- 
(ion of the color perlonnrmce. However, this color separa- 
lioo coringiiralion has strong advantages in scanning speed 
aiul single-jiass operaticjn. Fortunately, the degrmiation nmde 
iinavoidaljle by this configuration is small iind us minimized 
through the optimization process described in the next ser- 
ticjn. The HP ScanJet Uc s color ijerlbrmaivce ctnnpetes well 
with the other desktop scanners in the marketplace. 

Measuring and Optiinlziiig 

The lamps in the HP SciuiJet lit* are fluoresfvnt, Tlicy are 
produced with a custom mixture of phosphors that are spe- 
cifically designed to aid in tlie retTc^ation of the NTSC spec- 
tral sensitivities. Tin is ability to t^reate custom spectral char- 
acteristics (see Fig. •i) helps olTset the lim it at ions of tlie 
filters, The color sej^arat ion fillers are a thcbroic design (see 
"Color Separator Design r'' page 55). Their spectral charac- 
teristics can be altered primarily by moving the crossover 
frequencies. Ttiey have a fiurly stjuiu'e passband perfor- 
mance itiat does not match the shapes of the NTSC curves 



very well. However, the combination of the filters and the 
lamp produces a much <*lostT apjiroximation of tiie desired 
result. Extensive measurenieni and characterization of the 
scanner was performed using a spn*adsheet moch^I of all the 
spectral c^haract eristics throughout the optical palh. Tliis 
model was used to optimize the choice of lamps imd filter 
crossovers. .Additional o]:jtimiza!ion was achieved throiigh 
tiie selection (jf a carefully (ietennined default ;J-by-lt matii^i 
which is appliecl to aU scanned pixels. This 3-by-J? matiix 
provides a closer approximation of NTSC colo!". 

Color Matching 

The low -cost colf>r scaimers and printers available today 
contribute to a growmg denumd for accurate color unage 
reproduction. Users of dc^sktop systen^s having color image 
captiue, display, and printing capabilities aie demanding 
better color image reproduction fidelity. Many factors con- 
tribute to the chiillenges of color matching. 

Scanner Limitations. Scanner inaccuracies arc most com- 
monly caused by imperfect color matching functions in tfie 
color separation process. Another less ob\dous source of 
error is that ty|Hcal document scimncrs provide tlieir owti 
hght source. Any color scan from sucti a de%ice can only 
give color measurement data for documents %iewett under 
that pail iiular hglit. Oru*e the original docuinenrs s[jeclr;il 
reflectance is reduced to Mie diree diniensimis of colt >r ii 
cat>nol be reversed. The necess;n> information reqtiired for 
accurately detentutung the documeJil's color under a differ- 
ent light source is irret rlcMibly lost. This is true t^ven for a 
scanner with pertcci huuiiiu-like vision mid is unavoidable 
without increasu^g the munber of dimensions (sensor col- 
ors) within the scanner Ttie result is tJiat all ciilor matches 
are conditional. They may, and often do, fail when the \iew^- 
ing condirions ai"e changed. The only way lo produce an 
invaiiant match — one that holds regardless of viewing con- 
ditions^ — is to capture and reproduce not the color of the 
original but its spc^ctral reflectance. Scaimers and color 
printers are not capable of tills ten! ay. 

Monitor Limitations. Color monitors produce a wide range of 
colors by mixing three different colored phosphors. Espe- 
ciaUy in a well-iighted office, these monitors arc limited in 
their abihty to recreate the range of visible colors. First, a 
lly^ee-gun monitor, no matter how^ perfect, can never recre- 
ate the colors of the rauibow or any of a large region of 
other saturated colors. Second, because of tJie surrounding 
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light, a typicid moiiiror caimot produce a good black. Third. 
such a monitor has difficuity producing a pure. brighT white. 
These last hvo points can easily be iOustraied widi a com- 
ptiter momtor and a laser-imnted page. When the printed 
page is held near the momtor, i! will topically appear 
brighter and whiter than the monitors white. If the monitor 
is turned off (to re^'eal its blackesi I j lark) the blatk toner on 
the page will typically be much darker thai^ the black of the 
monitor. An accurate reproduction of a nionilor display of a 
white page witii a black and yellow^ square would produce a 
printed page whh many dots in the "white" areas, magenta 
dots in die '•yellow^" areas, and white dots in the "i>lack" 
areas. Tliis is rarefy die desired result. WTSIWTG ( whai ytJii 
see is what you get j is detlmf ely not desiretL Instead^ it's 
^'what you wjuit is what you get" thai is desired. 

Printer Limitatiaiis. Further compounding the problems of 
color matf^hing is the color gamut hniitations of low^'ost 
color printers fa printer's color gamut is the set of all of the 
coiors it can print). Many display able and scannable colors 
faU outside of the capal)ililies of most printei-s. Areas of 
images that contain these coloi^ must be modified to ac- 
conmiodate the printer limits. Once again, the mo.st accurate 
reproduction is often not the most desirable. 

Managir>g all of ttiese color matching issues and timitations 
is a very c()iui)lex task. However, advancements continue to 
be made, and I here is reason to hope for steady miprove- 
ment in the disquieting silualion that exists today on the PC, 

Color Separator Design 

The objective of a scannt^r is to digitize exactly what is on 
the document that is lieirvi^ scmmed. llowevt^r, this is not a 
realistic goal because it would require a (X'l) (charge 
coupled device) detector with m\ irdinitc number of pixels 
and a lens with a mothilatioit tratisfer function (MTF) e^jii^l 
to 1.0, which does not i-Kisl, (Modulalion transfer ftmction is 
a measure of the resolving power or image shaipness fjf the 
optical system. It is iinalrigons to a visual test that an optoni- 
etrist would use to determine a liunian eyt^'s resohing 
powen) Miist important, tlie scanrnr user flues not require 
an exact reproduction of the original lierause the human eye 
does not have infinite resolving power. Tlie HP vScanJet lie 
scanner is designed to obtain very tlne-dclailed images for a 
variety of color ^ind black and white doetntU'iUs and objinis 
that are ty|>icaJly scanned. 

To desij^n a high-perfot iriaiu'c, low-cost desktop scanner 
requirc^d a teiun effoil involving (be disciplines nf oplicai, 
mechaiiical, electric:at, tlrrtiware, and software engineering. 
Some key decisions that affected the design ^u-rfiilectnre 
were resolution (dtits |jer ituh), gray level de|jth, o|)nf^al 
scanning resolutiort, sf an lime, product size, image quality, 
and product cost. 

After the product was defined, a t tjlur seijazation technique 
was decided upon. 'Fliis affected all the enginetTing dls^::i- 
plines invoK(H! in the prorlui^t design. Various color sepjira- 
tion lechni(|ut^s are iisrd in the itnage reprothiition iJidustry. 
A fi^w^ of the coiruufHi teclmi(|U(^s;ue: 
C'olored dyes deposited on the CC'D substrate, Usetl in 
camcorders^ scanners, and color copiers. 
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ColtH Sflparaior Composite #2 



Co\gt Separator Composite ^1 



Fig. 4. Lens. (XJD detertor, iunl color si* j>Jirat fir rnrnposites. 

• Rotadng or ti-anslating reci, green, and blue liltcry. Used m 
scaimers. 

• Reil, green, and I>lue flasldng lajiips. l^sed in scanners. 

• BeiUii-spiitting prisms with multiple (XTJ sensors. Usett in 
scanners. 

To tneet the peTfomiance and txjst goals for the HP ScanJet 
Oc, a new HP proprietary* color separation nielitod was de- 
veloped and implemented. The initial development was done 
at HP Laboratories in Palo Alto, Califbniiaand the technol- 
ogy was transfen-ed to the Greeley Hai"dco]>y I)ivisi<jn it) 
C'olorado for continued development ajid implementation. 

The color separation system consists of a lent^, twt i ( tjilor 
separators, and a CCD detector as shown in the photograph, 
Rg, 4. Eac;h color separator is a lainittaled assembly as 
shown in Fig. [>. Each assembly is tnatle of three glass plates 
that are bontlecl to each other with a thin layer of opt ic^al 
adhesive. Red, green, imd blue reflective coatings j;u"e de]>os- 
iled (Jti theghiss before lamination. Specifically, dichroic 
coatings (2 to 3 fim total thickness) aie dejK)sitefl onto the 
glass sidLsJ rales, (rood spexOiil i>eiformiuice is oblaitied using 
di( broie coalings, tesultini^ in an ace mate cohirimelrlc 
device. 

TIk* distance between colors at the ('CD detector (see Fi^. 5) 
dtpendson tlie tlucknes.ses, index of refraction, mid anj*les 
of the glass plates separating tJie red, greetit and liha^ reflec- 
tors. The plates are thin glass sui>shalcs i\Vi\\ havv (ij^litly 
ccHjiroIlefl flatness. Ihicknt'ss, :uid an/^Ie toh^rauf t-^s. fbe thui 
[dal es are kunuiated to a thick baseplate*, which provides 
mechanical rigidity and fiatness. 1 Jiuing the multilayer di- 
cbrcjk' coating proct^ss the tJiui (>lates are distorted, but lam- 
inating them \i} the thick plale restotes the fiatness of the 
reOc^ctivt* surfaces. The first laminaled plate h^is the color 
t>rder of blue, gi*een, red while the second plate has the or- 
rler Alfred, green, blue. Tliis configtiratiiin eciualizes the opti- 
cal imth lengths to ensure simulEaneoiis jbcns fraall tbn*e 
colors. The ord(^r of coatings w;is selected lo ruiiximize 
spectral eftlcaency and simplify tlie coating process. 

Each color compt)nen1 Ls focused onto a CCD row^ each row 
consisting of 3400 imaging pixels (additiotial jiixels are 
available and are nst^l for li0\\ monitor ctaittTjl luul tim'k 
voltaji^e ronection). The ( < iJ generates a voltag(^ signal that 
is j)ro[ior1ioiial to the aniotmt of light incident on ibe detec- 
t(jr. This signal is prtjce.ssed ami I lien tligitized. f laving a 
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Color Separator Composites 



Fig. r^, ME^SiciiiJcf Ik' color 

Si'f Mr-It!!. 11! ItH-'UHMi 



CC'D llial iiitpgratps aJI tJirfi^ rows atitl sotises dl \Utvv tn>lt>rs 
sinuiltiinoously yU^lds a single-pass scaimpr vviUi exf^ellent 
inui^e quality. Tliis color separation methocl aLs() provldf^s 
iugh-]KTfomiancc scatining capability in a small ititcgtated 
pat'kago Hiat is ccisl^ffective and maniifacturable at high 
volumes. 

A layout of tJie optical systtnn showing iht* lighl palti is 
shown in Figs. 6 ajid 7. Fig. (5 also shows the solids mo tie I of 
the carriage, which includes the dual lanij) asx^enibly, tiiree 



minor??, llu^ Ivus, lh(M;olor.st;*(>^trator, ^uuJ Ihc t'CU^tsscMubly, 
The rmTiage Ls translated alr)ng the lengih of I he drjcument 
glass plateii by a slep|>er motor drive sysunn and a belt that 
ts cotine( led iti I he cnniagiv In Rg. 7 flie light path is drawn 
for several rays frotn tht^ scat tried regiotr. The tens is a six- 
element doulile Gauss design that yields a very good MTF 

Tlie f^i>tk'al system was designed and evaluated using a 
commereially available opt ieal design pnjgram. Ifnlike many 
otlier engineering disciplines .such as Unite elemetit atialysis, 



Mirror^ 




Mtrrofi3 



Colof SeparaTor AsserfililY 



Fig, 6. .Solids intxlel (if Hk^ HP SiiiiiJeT \U opIiniJ pn1li atid ( aniii^c. 
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Scan IJiie 



Mtrror 



Mirror 




Mirror 12 



Assembly 



Fig* 7. iiiiy t.iTif e of the optical 
path (one CO tor only). 



for which it Is more difficult to predk 1 accurately how a 
fabricated prototype w^ill perform, tJie perl'omiance of an 
optical system can be calculated verj' acc'Liralely. The effects 
of tolerances on the optical system were also modeled to 
ensure that the product could be manufacturefi at high vol- 
umes, Motiulation trtuisfer function (image shaipness) was 
evaluated for tolerances such as lens centeringt till , accu- 
racy of lens radiit index of refraction, and color separator 
flatness and thickness, A tyiDic^il plot of modulation at 105 
line pairs per inch (object side of die lens) as a function of 
position across the page is shown in Fig. S. Modulation is 
the sharpness of the image at a spC'Cific line pair frequency, 
w hercLis MTF is the shaq^ness of tiie itnage iis a fimction of 
line pair frequency. Fig. 8 demonstratc^s that the resohing 
power of the scaimer varies Ofily sligfitly with iJie location 



on tJie glass platen. This data includes the effect of the 
CCD's modulation: 

Modulation = Modulationf)pTics ^ Modulationt x^j. 

For fabricated optics tested on an optical bench, the mea- 
sured through-focus data agreed closely with the calculated 
residts. 

To achieve precise optical alignment, custom tooling was 
designed ai\d labricated to nice! production goals, Transla- 
tionai alignnient of ±10 fini is re(iuired for fot us and for cen- 
teiing the hght padi on \he iX^U. Tlie iilignnient tools, consbl- 
ing of transladonal and rotational stages, are controlled with 
an HP Vectra 386 computer antl software I ha! consistently 
gives optimized optical aligmnent. 



: ^ t f Y ? .M 



X Horizontal 



^ 
$ 



^ 

^ 



V 

X 



1 1 



V Vertical 



^ 

X 

V 









Lett 
Edge 



Line 
Lo€&l»on Dii Scanner Gfa^ Platen 



mm 



Fig, 8* Mrxhilalifin for horizrjiiiLil 
and vnrtirnJ \m^H nl 105 \mv pairs 
por inch (nliject Hitk> uf Ifiis) n& a 
function of platen position tbr 
red, green, aji<i bine. 
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6 Higli-Efficienav L^E^s 

Robert M. Fletcher 

R&D engineer Bob Fletcher 
has been with HP's Opto- 
etectFonics Division smce 
1 985 and has worked dr 
alumint/rn indium gallium 
phosphide LEDs for most of 
that time. HisrpsponsJbili- 
ties included ijevelap»ng 
wafer and die fabrication 
processes and transfening those processes from R^D 
tD manufacturing. He is named as an inventor in three 
patents on LEO device striic lures and is coauthor of 17 
papers rotated to lasers, LEDs, and matenafs growth 
and charactenzatJon Bob was born in Knoxvilie. Ten- 
nessee and attended Rice University, liorn which he 
recejved a BSEE degree m 1978. Cantinuing his stud- 
ies at Corneil University, he received an IVfSEE degree 
in 1981 and a PhD in the same subject m 1985. Bob's 
outside interests mcfude running, bicycling, playing 
classical gurtar. and remodeling his house 




Chihping Kua 




C.P. KuD IS an RSiD engineer 
and specialist in III- V crystal 
growth and cJiaraclerization, 
He was born in Taipei. Tai- 
wan and attended the Uni- 
versity of Utah, recervinga 
PhD degree m elecmcat en- 
gineering in 19S5. He joined 
HP's DpioeleGtronics Division 




the same year, and his work has focused on high- 
hrjghtness LEDs- He's the author of 25 papers related 
to epitaml growth of lll-V materials and is named as 
inventor m three patents on AllnGaP LEDs. C.P arwJ 
his wife have one child. His leisure activities mdude 
music and bridge. 

TimotliY 0. Osentow^ki 

An R8iD engineer at HP's 
optoelectronics dFvision, 1im 
OsentDwski is a specialist in 
epitaxial growth of materials 
foi high -bnghin ess LEDs. He 
was born in San Jose. 
Call torn la and completed 
work lor his BSEE degree fn 
l9Bt With HP since 1978. 
he is the coaothor of more than ten articles on epi- 
taxial growth of lll-V materials and is named as an 
inventor m three patents related to .AllnGaP lEDs. 
Tim is married and has two children He's active in 
Little League baseball and likes golf and bowling. 

Jtann Gwo Yu 

^^^^ JiannYu has been withthe 

S^ Optoel ectf on i cs D iv i s ran 

^ since 1981 . His duties as an 
m R&D engineer have included 
■ proc es s deve lo pment for 

I van us types c I materia Is 

1^ for LED displays Jiann stud- 
W lod p hvsic s at C h eng ku n g 
^ University m Taiwan (BS 

1957) and at the Unfversity of Wyoming IMS 1 372) 
before completing work tor a PhD degree m materiats 
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science from the Mwfsfti of CaJifomia at tos An- 
geies m 197B Selore coming to HR he was a re- 
searchef at Nortfimp, Jet PtDpylsJcn Labof atones, 
and TekTmnix Jiann enjoys hikmg and hfcvcling 

Virginia M. Robbms 

Barn in Cafnoen. N£fw 
J&rsev, Vrfginia ftobbins has 
a BEE degree from tfm Unn 
versstvof Defawarefisai) 

and MSE artd PhD degrees 
Uum Uie Universitv of Ifhnojs 
n3B3 3ndT987J She joined 
HP Label ra fortes upon gradu- 
ating from lllmois and has 
worked on crystal growth of AIGafnP by organ omelal- 
tic vapor phase epitaxy. Shes correncJy invofved in 
cry^aJ growth of Ifl-V semsconctuctors. Her work on 
LED transparent windows has resulted in two paten rs 
and she's the author or coauthor of several papers on 
[|I-V semiconductor materials and properties. Virgm^a 
is married and lists hikmg. camping, and runntngas 
leisure activities, 

15 HP Task Broker 



Terrence P. Graf 

A project manager at HP's 
Open Systems Software 
Division, Terry Grat has been 
wrtf] HP smcB the Apollo 
Computer acqmsrtion in 
1989 PastHPprojectsjn- 
clnde work on the Apollo 
Ho ma in op-erahng system 
Mnd the DSFy 1 operating 
system from the up^ri Systems Foundation He was 
the project manager for the HP Task Broker develop- 
ment team Terry has a BS degree in elecmcal engi- 
neering from Stevens Institute of Technology (19751 
and an MBA degree from Northeastern University 
<1987) His other professional experience includes 
work on operating systems at Wang Laboratories, 
He's a member o1 the 1E£E. 

Renato G. Assmt 

A native of Boston, Massa- 
chusetts. Ron Assini has 
been with HP since 1989, 
when HP acquired Apollo 
Computer A software engl- 
H^ " ^ neer at HP's Open Systems 

N^^ Software Division, he devel- 

oped the gfapitical user in- 
terface for HP Task Broker. 
On past projtuts, fie was a peripheral diagnostic engi- 
neer and contributed ro the development of the Apoflo 
Domain operating system and to OSF/1 from the Open 
Systems Foundatroo His other professional experi- 
ence includes a stmt at Honeywell/Bull as a test 
technician and diagnostic engineer f^on received a 
BS degree m computer technology from l4ortheastern 
University in 1989, He is married, has two children, 
and IS active in youth sports 



Erf ward J. Sftsrpe 





y 



^^^^ 



A. 



Ed Sharpe studied computer 
science at the State Umver- 
sttv of New Yurk m Bi/ffalo 
(BAl977)andai?heUnrver- 
: ". ' 'em Louts*' 

-rf has t^Bn 
vvim Hr .sirxi; i !iS9 and has 
^ - ^ y^ M ^^^^^ ^" several operating 

— * ^ ^^ ff systems, including Apollo 
Domain, Mach. and OSF/1 Hes currefitly an engmeer 
at the Open Systems Software Division and was re- 
sponsible for centra I tzed configuration development 
for HP Task Brolcer Ed is a memter of the ACM and 
the l£€E. 

John M. Lewis 

^1^^^ Software engineer John 

1^^^^^ Lewis was horn in Spring- 

M_ ^ ' fieEd. Massachusetts and 

^ attended Iowa Wesleyan 

CoHege IBS mathematics 
1974} and the University of 
Iowa (MS. computer science 
19771, He was a so h ware 
engineer tor Data General 
and Avatar Tecnnolagies before joining Apollo Com- 
puter. He worked on personal computer iniegratFoo 
products at Apollo both before and after the H? ac- 
quisition in 1989. John IS now m ttie Open Systems 
Software Division and contributed to sofh^are devel- 
opment and design for HP Task Broker His outside 
interests include Fly-fishing and skimg. A certiHed 
professional ski instructor, he conducts instructor 
training clinics and is a supen/isor at a local ski area. 

James J. Turner 

EiiyiMeer James Turner 
hi;i-ped develop the graphical 
user interface and internal 
library for HP Task Broker He 
received a BS degree in com 
puter science ham Boston 
Unwersity in 19B1 before 
j[>ining Apollo Computer, 
where he was 3 hardware 
designei ai the time of the HP acquisition m 1989. He 
is now a member of the Open Systems Software Dwf- 
sion He's named as tf^e inventor in a patent related 
to high-speed memory access. James enjoys skiing, 
golf, and playing ice hockey 

Mtcliaef C, Ward 

Mike Ward is an R Si D spe- 
cialist at the Open Systems 
Software Division and has 
been with HP since 1989. 
For the HP Task Broker proj- 
ect, he was involved in the 
development of the hard- 
ware, software, and network 
configuration required to 
support the product quality plan Previous \^P projacts 
include mstalNrtg, rnamTaimng. and repairing fl&D 
hardware and network equipment, install inq and 
maintaining the Apoflo Domain operating system, and 
testing operating systems before product release In 
previous professional positions, he was art engineer- 
mg and production assistant and manager Mike has 
a BA degree in theater from the University of Mew 





Hampshire { 19761 and an AA degree in compiits' 

science 'rofri Hesse? Col'eae f 1987 J 



23 HP-RT Operatiog System 

Kevin D. Mc^rgan 

■^B Section n^nagar Kevin 

^m^ ^ Morgan joined HP m 1380 

H[ K and has watlced m several 

1 -# <%^ R versions of the HP real time 
eKecutive (RTE) operating 
system He was a member 
of the marketing team for HP 
RISC-based computers at 
the tirrm of their introduc- 
tion, and was a proiect manager for a real-time intfif- 
face card for RISC systems. He's currently workir^g tn 
the Measurement Control Systems Division Born in 
Portland, Oregon, he studied computer science at the 
Unrversity of Califoroia at Santa Barbara IBS 1980] 
and the UniversEty of Call forma at Berkeley (MS 
1984). He's the author of a magazine article on real- 
time systems. Outside of work, ha's a musrcian. play- 
ing guitar m a rock and htues band, and also enjoys 
surfing. Kevin is married. 
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George A. Ar^ztnger 






With HPsmce 1969, George 
^ 'V An^inger is a systems soh- 

m M ware specialist for the HP-RT 

T*"^^*V Operating system in HP's 

Measurement Control Sys- 
tems Division He was bom 
in Waukegan, Illinois and 
received a BSEE degree from 
the Unrversity of Wtsconsm 
at Madison in 196B and an MSEE degree fmm Stanford 
University in 1969, While at HP, he has worked on 
DACE, a data acquisition and control executkve syslum, 
and on various Motions of RTE. an HP realtime exec- 
utive system. For the HP-RT project, he managed the 
development of the interrupt system and driver code 
and services. George is married and has two daugh- 
ters. In his spare time he helps his wife run a video 
store, and he's also interested m electric automobiles 
and plan^ to build one. 
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W, Bruce Culbertson 

J A member of the technical 

\ staff at HP Laboratories. 

1 Bruce Cuibertson came to 
Pf HP in 1983 and has worked 
V ori PC sofrware products, on 

an experimental real-time 
j^^^ c ompu ter n e two rk, a r^d on 
^^^ ICs and design software for 
^^" an HP PA-RISC processor. 
For theTsutsuji project, his contributions include 
devel oping key algorithms and data structures and 
writing the simulation compiler and topology plotter 
programs. Born in Oakland, Caldornra, he studied 
mathematics at tiie tJniversity of California ai Davis 
IBS 19?3I and at the University of California at San 
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DiegG IMA 1976). Hs also completed work for an MS 
degree in compuier science from Dartmouth College 
in 1983. His work on the err^ulaiion of Ihree-dimen- 
Sfonal objects on a two-dimensiDna] computer screen 
resulted in a patent, and tie's a member o1 the IEEE 
and the ACM Bruce likes skung, especially cross- 
country skr racing, playmg and collectinQ ethnic 
music, mountarneenrg, and bicycling. 

ToshJkJ Osame 

^^^. Born in Kagoshima, Japan, 

^^^^^^^ ToshiMOsame received a 
V^ni^^^B BS degree in physics from 
W \» ^^^^^^ Universiiy in 1977 

" -i2l "^^^ ^^ ^^ degree in the 

V ^^ same subject from O.sakfj 

University in 1979. He joined 
the VHP Systems LabDratarv 
m ISBEand now is an R&D 
engineer at VHP at Kurume. He CDniribuled to the 
deveEopment of a PLD design system and for the 
Tsutsuji system designed compiler architectures and 
developed the LDF language parser, the interface for 
the module generator, and the C simulaban model. 
Toshikiis marned and has three daughters 

Yoshisuke Otsuru 



(^ 



Yoshisuke Olsuru was proj- 
ect manager for the Tsutsujt 
project at Kurume Systems 
Laboratory in Japan, Bom m 
Kururrie, Fukooka, Japan, he 
earned a degree in mechani- 
Vf^^mt cal engmeering from Kurume 

yttHr Technical College in 1969, 

"^ and joJrted HP in 1985. He's 

the author of a series of review articles on ASIC de- 
sign. Yoshisuke is married and has two children. His 
leisure activities include watching movies and playing 
goif. 



J. Barry Shackleford 

Barry Shackleford is a 
principal project scientist at 
HP Laboratories, He initiated 
the project that resulted in 
the Tsutsuji logic synthesis 
system and was the RSD 
pro[ect leader. He is presently 
investigating new computer 
structures for comptlable 
hardware. Bom in Atlanta, Georgia, he compieted 
work for a BSEE decree from Auburn University in 
1971 and for an MSEE degree from the University of 
Soothern California in 1 975, Before coming to HP in 
1981 he worked for Hughes Aircraft and Amdahl. He 
has worked on a variety of other projects at HP. in- 
cluding a Kanji computer terminal. He is named as an 
inventor in two patents related to chip scan methods 
and ceEluIar arrays and in four pending patents on 
ceJIular- arrayed computation structures. He's also the 
author of two articles on neural networks and a 
member of the JEEE Barry speaks Japanese and en- 
joys Japanese food and culture. He hikes in the tiifis 
near HP every day and is currently spending most of 
his free time remodeling his home in Porto ta Valley, 
California. 






MotQD Tanaka 

Motoo Tanaka joined 
Ypk oga wa -Hewlett-Pa cka rd 
in 1984 and has held several 
RSiD positions. His past proj- 
ects include coniributions to 
a PLD design system and a 
PLD link for an electromc 
design system. For the Tsu- 
tsuji system, he was prp/ect 
manager of ttie user interlace team and drd the con- 
ceptual design and prototyping o( the user interface 
and circuit editor. Currently, he is a technical cus- 
tomer support specialist Motoo was born in Tokyo, 
Japan and received a bachelor's degree in electron ic 
engineering in 1984 from the University of Etectnc 
Communications. He^s mamed and has a son and 
daughter His outside interests include fishu^g and 
classical guitar^ — he's a member of the Kurume 
Guitar Ensemble 
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K. OouglaK Gennetten 

Douglas Gennetten started 
at HP in 1978 as an electri- 
cal engineer He has worked 
on several magnetic disk 
and tape products, earning 
two patents on data separa- 
tor and phase-locked loop 
design. In 1989, he com- 
pleted work for a degree in 
imaging science and printing technology from the 
Rochester Institute of Technology. He contributed to 
the design af the HP ScanJet [Ic from its original con- 
ception, fn his spare time, Douglas dreams of work- 
ing part-time at HP to become a "starving artist." He 
has developed an aesthetically pleasing computer- 
generated sundial that maintains accurate local time 
to within 3D seconds year-round. He transfers the de- 
sign to bronre or stone and hopes to have installations 
around the globe someday. 

Michael J, Steinfe 

An H&D engineer at the 
Greeley Ha rdcopy Division. 
Mike Steinle joined HP in 
1984 He designed and de- 
veloped the imaging optics 
and illummation system for 
the HP ScanJet He and col- 
laborated with the manufac- 
turing staff on the carriage 
assembly. His current assignment is to design and 
develop a next-generation optical system Mike was 
horn in Galena, Illinois and attended Augustana Col- 
lege, from which he received a SA degree Jn physics 
in 1SB1 At Purdue University, he studied mechanical 
engineering and received a BSME in 1982 and an 
MSME in 1984. He's the coauthor of four articles re- 
lated to the work he did on blood flow through a 
heart valve prosthesfs wNte he was at Purdue. His 
work has resulted in four patents on color separator 
design and scanner optical systems. Mike is married 
and has two daughters. He volunteers at a local youth 
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Mechanical Considerations for an 
Industrial Workstation 



Besides being a compute and data processing engine, a workstation in an 
industrial and measurement environment must be mechanically designed 
to handle the special requirements of these environments, 

by Brad CJements 



The HP 90OO Models 746i and 747i are enlry-level industrial 
workistalttJiLs- These systems are designed for le^l and iiiea- 
surement, induslriai process control, and electronic testing 
applications. I^olh maclnnes iire base«i on IIFs PA-RISC 



version 1.1 architecture,^ and they both run the HP-UX* ^.0 
operating system. Except Prhr ttiniensions and EISA and VME 
slots, botli machines provide the same features. Fig, 1 shows 
a rear %1ew of the Model 74 5i and 7 I7i workstiitions. 
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Fig. 1. Et^iir views ut HP mm 
Series TDIli inr]tisTrial work- 
staUons (a) Muriel 7451, Ov^^rall 
size 176,75 nun high by 425.45 
nim wiilB by 412.G nim dee|) 
(fiJJT inc^tws by 16.75 inches by 
16.2inclios), ([)) WallniotiTUed 
Meidel 747i. Overall mz^ rJlG 15 
jnni iiigh by 425.45 nirn wide hy 
412,6 mm deep (12.21 muhps by 
Ui75 iiichf^B by 16.2 inches). 



62 Atr j^im 1 993 Hewlet t Pij)t*k5iril Ju u niaJ 



)Copr. 1949-1998 Hewlett-Packard Co. 




Extruded 
Frame 



Cajnive 

Spring- Loaded 

Retracting 

Screws 



Fig, 2. CPU brit k atto^ving the 
I xrrac^tor handle. 



Background 

hi fhe bcginrdng of the investigation phase for tiie industrial 
workstation project, a team from R&D and marketing set 
out 10 ajiswer the question '^what makes an industrial work- 
Station different from a standard vvnrkjslation?" f Dozens of 
cuslomers in Itie measiu-emenl and itiduslrial automation 
markets were \isited to tielp ils understand Uieir needs that 
go beyond (he features provided in Hl*'s line of stimdard 
workstations. Ttiis article addresses the niechanical design 
aspects of the differences between standard ajid industrial 
workstations, and ttie design stiategy we use<l t*) rneei tlie 
needs of customers in the iiidustriaJ marketplaee who use or 
could use engineering workstations. 

Serviceability 

flnJike stanxiard workstations, industrial workstatioas are 
intended to be i[\corf)orated in large, very complex manufac- 
turing jirocesses thai produce products wonts extremely 
large ;unf»uiits of ruoney per hour Tlie cost of downtime 
demands the highest level of serviceabiiily, 'IVade-offs for 
€OBt that compromise serviceabiiity caratot be made. Our 
goal was to provide access to all service-level components 
in less thaji ttiree or four minutes. 

All service-level components in the Model 745i and 747i in- 
duslnai workstations including the tKfclqjlHnc ran be re- 
moved and replaced from the cable eiul of the computer 
while the compnter chassis remains n^ounted in the rack. 
This feaiure sets a new standard for serviceability in this 
industry. To make the sei"viceable juodules, or biicLH.ft easy 
to remove, an extractor handle was developetl which holds 
a captive spnng-load«*d retrading screw (see Fig. 2). The 
handle provides a trigger grip for the index fmger and a ful- 
cnun surface ftjtrUie thumb when renio\ii\g a(|jacent bilcks. 
The handle also provides a suriace to jjush on while seating 
the I (ricks. Regiilatoiy compliance dictated the use of a tool 
(o remove alt bricks. The raptiv(* screw, whicli is housed in 

I A siafldaid worksiation ts cioe that is syp^calfy used for program deviefopmani or runrung 
applicaiton pfpyram^ ieg . CAD/CAM, desktop putehmg, etc,). 

It A br^rk IS iKe tenm wb me br all the fimdyles dejugned tartheModtJl Mb\m 747 i 
wofltstatienL 



the handle, v^sually pops for^v^u-d to indicate to the operator 
that tlie brick Ls unfastetied. Once the bricks are removed an 
internal wall (see Fig. 3) swings up to unlatch so that it can 
be taken out of the cabinet to allow the customer to remove 
the backj^tlane by midoing a single captive fastener located 
on the backplane. 

Connectivity 

In addition to the robust core t/0 capabilities offered by 
HP s stajidai'd workstations, the Models 7 15i iind 747i pro- 
vide an HP-IB interface as part of the core Uil To provide 
1/0 functionality^ that goes i^eyond that offered as core I/O, 
expansion slots aie provirled. 'flie niunber <jf slots retfiiested 
for industrial workstatiorks is tiot only greater than for stan- 
dard workstations, Ijue ihe tyiies of I/O sit its are mixed. Be- 
sides the core 1/0 , tlie current HP statidiud workstiit.if>ns 
oniy provide EISA slots, which support sevenil I/O pro to- 
cols," In addition to supfjoning EISA slots, the Model 747i 




Fig. 3. (laining access to the Model T47i t^ackijlatie by renvtviiig iJie 
iiilir'niLi] wall. 
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also supports VTVf Ebus. The package for thesi* machines was 
designed to he large enough to be able to house th(* larger 
cards suefi as VXB>uh cards,! 

Support Life 

Support life is a very impojlant coitsideration to the uidiLS- 
trial aiittjniarHin cnstortirr. Oiu (^ an iix lust rial wcjrkstation 
has hern (k'^signed dm] iiisiallerl inlo a fat toiy pnu essit is 
mreiy repiaref i or ui Jgradeil for reasons fJl.her tjian loss of 
support- Support litV is uoi sonu^iliing thai is designetl in. 
but rather a promise or eonuuit meat made to eustoniers by 
HP. The {'imeut staudaiTl woikstations m'e supported for 
fi\%* years while the Models 74 5i ajiti 74 7 i eany kt lO-ye^ir 
comniilnient. To reflect a long su]7poi1 life, the iiiduslrial 
design of the Models 74 5 i iual 74 7i has a much plaiuiT and 
Unu^ess look (sec Fig. 4 J llum the new line of sUmdard 
workstations* 

Reliability 

In many standard workstation applicatlorm the Imrdware 
becomes ot>solete long before physically weaiing out because 
of reasons such as the availability of lower-cost nuicliines oi 
niachines with faster graphics engines. With induslriiil work- 
stations this may not he the case 1 because c-ertaiu items like 
the fan nuiy not have the saine fO-year or even ^O-year life 
that a facUiiy insiallation atay have. For examples i^xtensive 
testing was done on fan hearing systems to select tJie best far\ 
for the Models 74 5 i and 74 7i, but the life expectancy of the 
fan is still not greater' tJian the service life of the wcjrkstation. 
Thus, the power supply carries a fim-tachometer signal and 
an o vert ernpeial lire signal, and is senic cable. More detaQs 
relating to fan and airflow reliability are disciisst^d later in 
this article. 

t As ot this writing VXibus cartfs are not vet supporred in the HP SQOOSenes 700i madiine^. 





Fig, 4, RarkiiKHiiii+'cl MiKlfl 747i wilh mmvabW imtUmi , 



Fig, 5, ttiiLkiuuuiitLHl Mijdf^ 747i ^^llli ''iitjit^ end out . 

Grapiiics 

hi ;i lyi>it al standard workstation cunfiguration only one 
large ( ()l<(i drsjtlay needs lo be shppnned bet ausc The user 
is able to access multiple a]jplieations using wiiidows. llow^- 
ever, in scmie indiLsirial automation environments, industrial 
woikstations are require fl to support several large graphics 
displays. Forexiunple. in a control rotim applieatitJU largf^ 
monitors are used to rej)iace walls full of rritical instnunctu 
gangers. Tlie user or control room operator needs lo monitor 
more gauge images tluin can be seen on one monitor screen 
without paging through windows, Windows are still nee(ied 
for less critit'iiJ gauges and other operations. 

Fro n t - to- Back R eve rsi b i lity 

FornieiLsiuement automation customers, the business end 
or user interface^ end of tlu^ Models 745i aiul 747i is ttie non- 
cable cMid of du^ pat kagt* [see Fig. 4^ All the cables and clut- 
ter are hidden in the real' of the machine inside of the rack- 
moiuU cabinet, which has an access door in the back. 
User-accessiblt» mass storage^ bays, mi on/off switch, and 
diagnostic LEDs are located at the front end tif thi^ matiunet 
which is the most cosmetic surface of the protlut L 

On the tjiher hand, the industrial automation customer typi- 
cally wants tJie cable end of the machine to be the user iiUer- 
face enci of die product, witb the diagnostic LEDs, on/off 
switch, and nser-aecessildc^ mass storage^ bay also Itjcatetl a! 
the cable eml of the machine (see Fig. 5). The Models 74rit 
and 74 7 i were designed to allow IIP manufattnring to con- 
flgurt^ the computer to met4 the nvcds of both the measure- 
ment automation and the industrial automation customer. 
Front to-back reversibility is provittt^d by redimdmit tin/btl 
switches, rt^dundant diagnostic LHl )s, cUid a nuLss storage 
ijftck that allows user-accessible devices to he located at 
either end of the product. 

Mounting Options 

Siaiuiard workstations iire designed to live in an tJOlce envi- 
ronnient with the workstation cabinet sitting under a aioni- 
tor on a desktop or as a mirutowti^r on rhe floor besitte the 
desk. The mdustricil work.statitai is rctjuire*! to live in rack- 
mount and other mounted enmonnients. The Models 7451 
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aiid 747i can bo momited in a variety of different coiifigii ra- 
tions. They cfin be rackmounted froni the cable encl, rack- 
moimted fi'oni the noncable end, stacked on a bench witJi 
other IIP t>rodnctH, waihnoimted with cables facing out tioni 
the wall, or mastinounted close to tlie center of mass of the 
product (see Fig, 6), 

Package Form Factor 

In a rackniounl en vironmeni, package Iteigln iy always im- 
portant to instrument and measiirenieni auLomation custom- 
ers, but perhajhs more important to indusirinl autcimation 
customers is tlw package depih. Tlie Mfnlels 7431 tu\d 74 7i 
art-^ designed to lit inside a 45()-nmi ( 17.7-in } deep wall- 
niounleci eabinet with the door closed. With the front l)ezel 
retiioved the cQstance from the moimting wall to the I/O con- 
ned or siirrace \^ ^^5^^ mm. leaving a 95-nnn depth for cables. 
The heii^hl <»f fht* pat kage w;ls driven by (he nearest even 
nujnher of niekmomil units that a 120-mtn fan imd lijie filler 
stack would fit in. Wiih feel reuKnetl the Mode! 745i ts ff>ur 
EIA (Eleclronit's hidiistries M.'^o* iatiou) stmufard rack units 
(177 nun) high ajid the Motiel 74 7 i is .staeu EIA s tar u lard 
rack units (310.4 nun) lugh. Tlie width of the package is 425 
mm to allow nonraclcmoiinled stacking on a lah bench wilh 
other standard HP 42r)-mm"Wi(!e instniments. 



Airflow Management and Acoustics 

The HP acoustic noise goal for office ernirtimnent products Is 
n() dl^i maximum Sf ntnd jMnver le\eL Standard worksiatioas 
struggle to nieet this goal wlule not making thermal conipn> 
mises. IndiLstrial workstations can be found in control nnmi 
or factory 'floor environmeiHs wlitch can be wanner than a 
typical office. Tlie \ariety of mfKmdng opiions pro\idefl hv 
the M(xleis 745i and 747j introduce airflow inlet t-fmstralnts 
not required of standard workstations. To provide more 
thermal margin at higher temperatures wilh constrained 
airflow inlets, the oU dBa goal was compromised. The Model 
745i noise level is abom 54 dBa and the Model 747i noise 
le\'el with two fai^ is about 57 dBa, 

The Models 745i and 747i incoqiorate a negative pressure 
airflow design, rnlike a pc^itive pressure airflow desjgiL 
which allows airborne parricnlates to be filtered nut througli 
an inlet filter, the tie^ativ*' pressure systeju has no filter. 
Small inlef Oltert^ fill with airborne paitirulaies in a rela- 
tively short timCi greatly reducing the volume of air that 
moves through the product. Experience has shown that 
these small filters do not gel clean efi as often as required 
mu\ lead 1 o sysi em reliabihty problems. Rather ihaji tlltering 
dust, the negative jjressure design passes most dust through 
the product. The dust that does collect over time inside the 
product is fai* less detrimental than a clogged filter. For ex- 
tremely dusty environments (he product should be* housctl 
m an enckjsiue that pn.ni(ies air filtering on a scale that can 
adequately and rehalily filter airborne iiarticiilates- Tlie neg- 
ative fjjessure api>roacii offers some addilional het^efits. 
First, a much larger inlet area Is possible which reduces 
toi.al airfiow impedanct^ lluoiigli flie j>rodiich S^m oruL an 
iminteiTUpled airllnw zmw in IVoni of tbe fmi iiifr^idiires 
more laminar airflow to tlie fan blarles, which reduces 
acoustic noise. Finally, airflow^ is more imifonn. Having 
more oplitms fcu' in lei locations provides b(>tter airflow 
rationing tln'ougliout tlie i>r(jduct. 

When virwed IVoui ihe cable end of the product, du^ main air 
iukH is on (be lefi side (jf tile product (see Fig, 7), h^ im in- 
dns(riai automation itistailation the left side tyi:>ieally has fai' 




Fig. 7. xMass storage brick with 
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fewer cables thaii the right side. This relativdy small niinv 
ber of <'aV>les on the left side of the product create? Uttle 
airflow impedance. 

Ill addition to the intet holes on the left side, Inlet holes are 
provifled on the front fiftlieprfidtu'L The front holes are 
redundant, allowing t lie air inlet on the left side to be partly 
restricted as m a very tight nit^k installation with iitde plenuni 
space on the skies Air flows across the bricks and into the 
power supply. In an indiistriiil automaMon installation, the 
cables Uiat come Into the system rack and lie aJong the right 
side of the product cm^ be so nuniercHis lliat airflow through 
them can be difficult. Therefore, the air exhaust designed 
into the Models 74-^1 and 74 7i is rmt the caljle end of the 
product t hrougii the power supply (see Fig. 8). 

The power supply is equipped with a temperature sensor 
tiiat is Joc^atefi near the exhaust fai\. Tins sensor controls thi^ 
fail speefl and is located downstream in the airflow path so 
that the dm will speed up when the system is heavily loaded, 
the am In en I air is n^laii\ ely warm, or tlie inlet is paitiaHy 
restrif^ted. The airflow through the Model 74 5i is a generous 
56 ft'Vnnn at low speed and 70 ft^Vmin at high speed. The 
Model 74 7i with tw^o £ims moves 105 ft Vmin of air at low 
Speed tUid 132 ft Vmin at higli sr^ccd. 

In the Model 74 7i, which has two power supplies and one 
sensor for each supply, each sensor can also sense uheri the 
fan associated with one of the powder supplies is noi operat- 
ing properly. Wlien this happens, the operating Ian will be 
sped up. ptilling air through the power supply with the de- 
fective Ian. 'fliis should extend the life of the power supply 
with tht^ defective iHtnmti] the c( nit rolled process can be 
shut down m a graceful and less disjistrous manner or luuil 
control can be passed to a redundant computer. 

Brick Strategy 

The wide range of measurement and industrial automation 
customer needs could not be niel with just one product. 
Therefore, we ha<l to develop a strategy to offer a high de- 
gree of flexibility for product features, hi aii idt^il worltL tlu^ 
best approach l(j pro\1ding different profhict teiitiues would 
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be 1.0 design a family of subassemblies, or brickSp which 
couki be mixed and mat chef I ij; many different configura- 
dons. Each brick woukl adhere to standard size constraints 
such as widtli, depth, incremental height units, and electri* 
eal interconnect star\dards. Conceptually the OEM customer 
would be able to select the nimibcr. type, and mix of I/O slots, 
the number and tyije of graphics display interfaces, the num- 
ber anci tyjie of mass storage devices, ;^md the number anfi 
type of CPU options. 

For the Model 745i and 74 7i workstations, the width of Ihe 
standard brick was driven by the width of two EISA cards 
hud side by sitie. The maximum depth of a brick was driven 
by the length tjfan EISA cmd. The standard brick lieight 
increment concept was al>arTdoned to allow die products to 
flt into a smaller i>ackage while adhering to EIA standard 
rackmoiini increments. The electrical intercoimect standard 
was also at>aiKioned because of physical connector space, 
connector cost, and higli insertion forces. Flexibility for 
future upgiades was traded off for greater serviceabOity and 
lower cost, 

hid ust rial and measurement automation customers rarely 
upgrade a system after it is installed. Therefore, rather than 
designing a standard package with 0|3tional ex])anders that 
cai'ry' the added cost of ln>x-tu-box interconnect anti make 
the removal of tlie baclq>lane in the rat:k impossible, an ap- 
proach of using standard tmcks housed in a variety of differ- 
ent sizetl chassis was implemented. Each brick has the same 
baclqjlane, 

Tlie Model 745i uses a 41 r (four EIA instrument rack units) 
high box imd holds a CPl ^ brick, a four-slot EISA brick, a 
mass storage^ brick; and a powder supply brick (see Fig. la). 
The Model 747i uses a 7LI package which holds a CPU brick, 
a twci-slot EISA brick, an SGV (stmidard grapliic connect) 
brick, a six-slot VMEbus brick, and tw^o power supplies (see 
Fig. lb). The boxes contain two internal walls that support 
the Ctii'fl guides, aJid a structure to sut>p<ni the i)rieks. These 
walls {'an be sei^aiated from tiie chassis, making it possible 
to design other versions of walls quickly. This feature allow^s 
different versions of the industrial workstations to he de- 
signeti for OEM customers. The versatihty offered by the 
walls alloW'S a shorter lime to market for futmv products and 
rethices the development cost of redesigning an entire pack- 
age. The backplane, whiih prfj\ides j^nver and bus signals 
Ijetween bricks, is taiique for each product develojied, 

CPU Brick. The IIP PA^HISC processor delivers more than 
enough processing for the vast majority of customers in the 
hidustrial and measmement markets. However, customers 
do wLuit IIP PA-RISC machines for the expected suppori life* 
Standard HIM b>1es of SIMM P^CC (errnr cfrired ion code) 
HAM witli optiMnai configurations ui> to I'lHM bytes Ls sup- 
ported. The core I/O includes HP-HIL. parallel, two serial 
ports, audio in and out, SCSI, A CI (access unit inieriaee) 
LAN, HP-IB, and onboard 12804iydi ^24-pixel grupbics nu^m- 
oiy. The CPC luick is honseti in an Eduminum extruded 
ftame lo provide additional mechanical board suppoit dur- 
ing msertionj to proiect smface mount components on the 
imderside when outside the product, ;md lo offer a rugged 
industrial appearance antl leei. Fig, 2 shows the CPC brick. 



Fig. 8. Power supply module. 
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Fig, 9. EISA i.4ir.J luick \silh foiic sluts. 

EISA Brick. To save spacp iii the product tlie EISA I/O caixls 
are oriented hoiizoiitally (see Fig, 9). The structure that sup- 
potts the cards Jilong with the converter circuits is easily 
removed for senice or upgrades. Easy access to EISA I/O 
cards is a feature that adds to the competitiveness of oiu- 
workstations in the industrial market};)Iace. AJnitJst all of the 
PCs used in the industrial marketplace reqttire the user to 
remove tJie workstation cabmet from the rack and then 
open a clamshell case to service or upgrade I/O cards. 

Mass Storage Brick. Tlie removahle (ray that holds tlie mass 
storage devices is stnictuially reinforced so that the me- 
chanical vitM'ation frequency response is high. T^e tray is 
firmly supported at one end by tluee tight-toleraiiced pins 
and at the other by two captive tlireaded fasteners. This 
solid foundation approiicli required no additional vibrytion 
momits beyond ihose designed into the individual mass stor- 
age devices by tlie mantifacturer. Tliis approach not only is 
lower in cost for the majority of customers, but provides a 
signiflcimtly more rugged system. Flowever, customers with 
systems that are vehicle mounted wiU require very Sf>f1 
vibration isolators and t hus a larger shock zone ai'ound the 
disk, both of which lead to higher costs and a physically 
larger product. Fig. 7 shows a mass storage brick. 

The individual mass storage devices ai'e held in place by 
carriers that were leveraged from the high-vohniu' HP ^K)00 
Model 42 Be workstation. These carriers, which are shown in 
Fig. 7, can be oriented lowaids eitlier the cable end or the 
none able end of the tray by means of interlock details 
located in different places on the tray. 

The SCSI interface to Ihe mass storage devices is provided 
by an external s Id elded cable wliidi comes from a filtered 
comiector on the CPU brick. This approach wkis leveraged 
from the design used in tiie HP 90(10 Models 720 and 730. 
Besides providing excellent EMI and KSD performance, this 
design allows the user to connect to an external mass storage 
devit e rattier than the devices on the mass storage tray. This 
capability is useful for diagnostics, 

VMEbus Brick The VMKhns brick, shown in Hg. Uj, provides 
six VMEbus slots. The eiUIre brick, which hickuies the VTVIE- 
bus cardcage, backplane, and ti^ansiation circuit, is remov- 
able as one piece. Customers are flelighted tr^ liave the abil- 
ity to remove the VMEbus In ick and take it \o a lal> l>ench to 
work tHi. With the brick removed, access to the P2 coimec- 
tort is convenient. A (aide passage slot allows easy passage 




Fig, 10, V^IEbus brick wiib six \^lEbus slots. The Hmt. two slots are 

of:f:u[)ipfi by a twD-slot V^lEbijs mofUiIe. 

of ribbon cable from the rear of tlie backijlaiie to inside the 
cardcage. 

The cover shown hi Fig. 10 is required to provide RFl regula- 
toiy compliance. Tlie customer ran modify Ihe cover to add 
the desired bulkheacl-slyle connector hole patterns and pro- 
vide cables with service loops as required for each different 
configuration. Most customers elect to ehminate this part 
w hen it is not required. 

SGC Brick. Standard graphic comiect, or SGC, allows access 
to HP graphics and is a standard feature of HP 9000 Series 
700 worksrations. 

Power Sopply 

The power supply deliv^ers up to 300 watts. Once the power 
supply is i'erHr>ved, the 120-nmi fmi houserl inside the povver 
supply is accessible by removii^ only two screws. A floating 
coraiector system prevents damage from met hanical shock. 
The power supply is wrapped in metal. Besidi-s |>irih-rting 
the user from electrical shock, this reduces K.Mi iK'iween 
die power supply and the CPU or other EMI-sensitive bricks. 
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Online CO2 Laser Beam Real-Time 
Control Algorithm for Orthopedic 
Surgical Applications 

New data obtained from treating polymethylmethacrvlate (PMMA) with a 
nonmoving, CW, 10-watt, CO2 laser beam is presented. Guidelines based 
on this data can be used during precision laser surgery in orthopedics to 
avoid unnecessary mechanical and thermal trauma to healthy bone tissue 
A computerized algorithm incorporating these guidelines can be imple- 
mented on an HP 9000 workstation connected to a central database for 
multiple-operating-room data collection, online consultation, and analysis. 

by Franco A. Canestri 



TliL^ work descril)od in this article was done to coitRmi in 
greater de tail the coiichisions piit^lishetl in 1983* on treating 
l>olymethylniethac'rylale (PMMA) with a nonniovirxg, V\\\ 
lU"wall CO 2 Iti-^er beam and to investigate any possilile addi- 
tjunal relaUun^hiji aniong (he ahlaled nietliaeiyUiU' vulume, 
the .surfaee craler radiits H(\.), and ity deplh Z(te)» where t.i, 
is the beani exposure time in seconds. Because of tlie very 
rlose thernioflynaniir similarity between PMMA aiid bont* 
tissue {see Tabh* I), Ihese results may he valuable in ortho- 
jjedic surgety. where the procedures of cutting bone ^nid 
removal of bone cement (a methacrylate polymer j aic well- 
known sources of complications. Carbon dioxide Uisers 
have been used in i finlinuouw and pulseil UKides in hn(h 
ciises, but bone tarboni^aiion. thennal inJHr>t and debiis 
rewuli veiy rre<]ueu!ly in intlajumainry re.spoi^se with a re- 
tarded rate of hone healir^ig. Tliererr>re* a method for clean 
ren\oval of bone reuient and precise osteotomy mthout 
mechanical and thermal trauma would have distinct 
advantiiges over existing techniques. 

In [his article, equations lor Rtt^.) rmd Z(t(.) for eaeh focaJ 
If^ngtfi are iiresented. A very interesting relation was identi- 
lu'tl bet weejij th** ablated vohmie for a given focal lengtli and 
the values of R and Z integrateri between l:^. - and t^. = 2 
seconds. The most important result is confirmation of the 
very close relatlotiship l>etween the iueas under the R and Z 
cuiires and the voltune. Willi a simple equation (equation 3, 
discussed later), it is possible to compare the characteristics 
of cniters obtained with moving antl nonnio\ing laser beams 
al dilTerertt operative conditions between E} and j! seconds, a 
tinie interval that cn\ers the ivuijority ot combinations of 
output powers, scaimiiig speeds, and focal lengtlis reported 
in the hteratin-e."^'^ ' The close diennodjmimiic similarities 
between PMMA and eonvjract bont^ tissue^ have been demon- 
strated, except for the water content (Table 1, bottom), 
which strongly irdluences CO2 laser beam absorption. 

Portions of ttiis article were a^^g[nally published in the {ntemsUonBUoufnat of Cftmcal 
Mwitormg and Ccmpufing? © Cc^vright 1992 Kluwer Academic Putjlisliers, fleprinted with 
pemiission. 



Therefore^ a correction factor must be apptied to the main 
equation to calculate the ablated volume m bone tissue, 

Tabfe I 

PMMA versus Bone ThennodvnamJc Parameters 

in the Near to Miti-lnf rated Wavelength Laser Beam Region 

(800nmto10.6^im) 

PMMA Bone Tissue 



Density 


1.1 


[!!-)] 


0.8 to 1.3 


[SI 


IcmV 










Specific Heat 

i ' ] 


1.38 


[7] 


1.;^ to 2:11 


[5] 


niermal Conditctrvitv 


0,17 


17] 


0.16 10 fl.;M 


[B] 


\s ■ cm ■ ( / 










Thernial Diffusivity 


LOG 


!1| 


■ i|to2.2 


[5] 


(¥-'»"i 










Fluence AiHation 


9.6 


17) 


2,1 uy.iA 


[14] 


Threshold 






8.0 to 18.0 


[10] 


\cnr/ 


















balent Heat of Ablation 


3M 


[7] 


3,7 to 13.0 


[11] 


vcnr / 










Ablation Energy 


3Ii 


[7] 


3,0 to 14.0 


m 


(i-»1 










Water Content (%) 


0.3 


[191 


10.0 


[14] 




imiiiersed 








24h @ 23 "C 







Th^ numbers in square braQksiis indjc^m refsrencBs Jisted on page 72 
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! 2 3 4 5 5 7 

1.5 3 4 5 6 7.5 9 10 5 

Z,5 5 75 ID 115 15 175 

3.5 7 10.5 M 17.5 21 24.5 

45 9 13.5 18 22.5 27 31 5 



For te = 0.4 s. 



Fig. 1. fvwal sequencer- riiainx 



Equipment aiid S^mboLs 

As (iasi^ntJtHl in refereiice 1. our gro^ip at the National Cancer 
Institute of Milan obtained results for laser wavelengths of 
k^ = 2.5 in, /u2 = 5 in, X^ - 7.5 in, and Afj+ - 4CK) mm = 15,75 in, 
using a conmiercial ValUvre CO^ laser with a nonmial output 
of 10 watts on the beam spol. The transverse beam mode 
waK TEMn- aJtd tlie fociLsiivg heatl wns kept steady over 
well-polished cubes of ester itiethacr^'laie { Vedril C from 
Mojitedison) measuring 3 by ^) by 2 cm, TJie exposme inter- 
vals of the nonmo\ing CW COo laser beam weie set to 0.4, 
0.7, ], L:i 1,6, and 1.9 seconds. ^-^^'^ A nitrogen flaw^ helped 
remove powder and steam during iixadiation. Kaowinj^ that 
>.2 = 2 ).i. k-4 = 3 >.j, and }^^+ - 6.3 hi, a working matrix ^' (Fig, 
i ) was deft net! m w^hich the elements of each row represent 
focal letigths n?vt„ where n = 1, 2, 3, 4,. .. and k^ Is the Ijasic 
focal lengtii, \ ;ii'>^ing between 3 iticli ajTtl tm aj'bitxaiy nuixi- 
nium in steps of 0.5 inch (first colunm). The matrix ¥ 
represents a corti]jrehensive set of c<immonIy used ff>cal 
iengths^^^^'"^ strucuued to allow quick access to the opera- 
Honal data on a given focal length. Each row of ^* defines 
the conce])t of a fociil sequence FS[, of a given basic focal 
length M,. 

Results 

All of tJic* existing experimental trials iM^rformerl using a CW 
('02 laser beam with exposiue times rmi|*itij^ between 0.4 
and 2 seconds on PMMA samples show- clearly the strong 
focal-length-rehited ablative beam eff(^ctsJ'^^'''^Thc data 
points Rft,.] and Z{r,,) measured in this study c^tn be ex- 
jjrcssed for tj. Ijetween and 2 seconds by the equations 
shown in Fig. 2. Tlie follo^vmiJ empiri£:til equation can fore- 
cast I he ablated volumes in ^'M^L'\ for focaJ lettgths of 2.5in^ 
5 in, 7.5 in, and 15,75 hi (400 mm): 



k , 



(i) 



cKh] 



Z(l)dl 



i: 



H(t)dt 



= h 



In ilijs equal ion. ^■i\^„ \\z,V%) is the ablated PMIVL'V vohune 
afi e r ( ^ se( 't > nds t >f k^-fi h ' t is e( I lase i' bt * am i rrat i i at i on. V| ,( k\ ^ ) 
is r.ouslant lor each FSb- n is an integer rtmltij>lu of Ai, = j + 
0.5 m, where j = 0.5, 1,2,3,... 

Recent investigations have shown tluif eciiiatitm 1 ran hv 
written in a more analytical fomi frjr exjiusun^ times t,. ofO. I 
and 2 seconds as follow h: 



2\- 



ViXki - (0J06S + 0.5581 ^.j, - omm kk) 



For to = 2 s, 



(2) 



,,. f -57,5t>l + 49.307 ki, 
V{K^l = expJ ^ 

[l + 14J41 Xk + 0^1 Ak. 



Fig, 3 compares experimental data for these two exposure 
times with plots of etjuations 2, For t^. = 0.4 s, r^ = 0.996 and 
for te = 2 s. r^ = 0.9S7, wiiere r- is a measure of how^ well a 
given analytical curx^e fits the experimental data (r^ = 1 for a 
perfect match). These equations can also be used to study 



J^ = 2,5 in = 63.5 mm 






0.55 ^ t^ ^ 2 


z = u - tl'^ 


D < le £ 0.55 


AZ - ± 0.34 




2R = C.258 -h 0.G42 tj *^*^ 


0< te^l 


ZH = 0.9 


Ie^I 


A2R = ±fl.2 




I.- 5 in = 127 mm 




^ = 3i.s-p 


It 2:1 


Z = T1 tf ^" 


0< tg S 1 


.VZ ^ ± &.27 




2R = 0.51fi + 0.78^ ij^^^^ 


J ^ te < 1 


2R = U 


U^l 


,\2R=± 11,42 






X « 7.5 in = 190.5 mm 




Z = 14.13 ln(1 + \^\ 


0<l|jSl.5 




t|,S-1.5 


\Z = ±0,3 




2R = 0.774 + 0.706 ij^^ 


< te < 1 


2R = 1,48 


teSl 


.\2R = ±0.38 





< te ^ 2 



I - 15J5 in - 40O mm 
Z ^ 25 le 
\Z = ±0.11 

2R = 1.625 + 0.575 ij^^^ Q < l^ ^ 1 

2fi ^ 2.2 la ^ 1 

.12B = ± Q.4 

Fig. 2h Kxpermienr.ai best-fit equation.s tor RCttO arid 2(i^.) for non- 
1 1 unit ig, 10- watt, ('W Iriser beatnsat fncaj lf*ngthH of 2.5, 5, 7.5, and 
15.7fi Inches. H and 7, art* in nun. if. is iti spcnnds. Thp trttnsverse 

br.^^rn imckIo was TFOM 1 1* 
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Surpon 



Ri<:ai Lflngtit (inches I 

Fig, 3, Best lit curves of avei;a^ri ablated vGlumes Iti PMI^lAIar a 
10-wattf riOTunoving, CW, TEMj i» laser beaiti, 

the effects of changing focal lengths, exposure tint^s, aiid 
alilatcd voluineis. Il is iinpoitajit to notice that tlieru is a 
inaxinium ablated volume for each exposure time t^., aiul 
rhat hicr easing tile focal length does not correspond to a 
linear increase of ttte ai^lated volume. 

LCA Algarithmr Preliminary Investigation and Proposal 

Since FM^L^^'^■^ and compact bf*iie tissue have similar ther- 
modyrnui^c chaiacteristics except for their water <'t patent, riie 
I)roi)osed equations can he usihI in a closed-loop coinputer- 
asststed algorithm for oj1hopedi(^ suigical atiplicaiions. The 
algorithm is named Lt:A after the two parameters L and C m 
equation 1. 

Tlie intplementation of this algoritimi on a IIP 9(101 1 HP4JX^= 
workstal ion wovdd provide the surgeon vtith au ad<iii ional 
safety tool to reduce tht^ risks of bone injin-y <iuring laser 
inadfat.lon, which often results in uifliumnatory [esponse 
wiUi a retarded rate of bone healmg. ^^^^'^'^ This happens 
quite frequenUy during general orthopedic stugery; especially 
because of incon ect settings of laser^ beam focal lengtlis 
and/or exi.>osure times. Removal of bone cement (a PMMA- 
based polymer) that is in close contact with healthy nat ive 
bone is liie most critical openuion in terms of potential bone 
damage/^ 

Operation of the LCA al^oiitbrtr is as foUows (sec Fig. 4). 
The surgetin sjjecifies the reiiuireri crater dimneter 2H imd 
depth Z ajid the maximum loleram^es A2R and AZ, and 
chooses parameters K^, t^., W, v that are likely to protiuce tiie 
desired ablation. ( W is the output power of the laser and v is 
the scaiming speed of the laser beam. ) Tlie computer pro- 
gram checks whether K]^ in FSt> is ^ilso mchuled in FS^.itv The 
fot:aJ sequence FS^.n is known experimentidly and is there- 
fore always used as the primaiy reference. 

In parallel, the maximum ablation volume V^n^i^ is ciilciilaled 
ajid stored as described in reference 15, using the specifietl 
values of R and Z. The values of Vj,, L, and C are calculated 
using equation L If A^ is not an element of FS2J, the algo- 
ritiim mterpolales betw^een the two closest focal lengths 
belonging to I'^i.S- 

Equation 1 has to be corrected for a laser beam that is 
moving with respect to tlie operating table and to take mto 
consideration the different Ci'h laser beam absoipt ion mo- 
dalkies of PMIVIA and bone tissue because of theii' different 



Final 
fl^cDiniriGfiitaNoris 



Fig, 4, Flowrharr (iftliP LCA alj^orithm. 

water content. A nonmovuig laser beam has tlie smru^ cut- 
tuig capabilities of a moving beam if the fomier has an 
equivalent exposure time (t^qv) given by the equation:^ 
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where R^ is the surface radius of the heatii spot, v is the 
sc^annjng speed of tiie laser beam. W is the output power of 
the moving la^ser. aiid Wt^v is the output power of tjie iK>n- 
moving iaser. 

In the case of a mo\iog laser beam (v;^0). equation 3 is used 
to detenuine t^^i- The crater diameter 2R aiiti depth Z are 
then calculated using the e<iuations in Fig. 2. Their valties 
are compared with the speciOed values iLsingtlie tolerances 
A2R and AZ supplied by ttie surgeon as input data. Tlie two 
calculated values are conecled by acljusting the exposure 
time t^ until they are within the specified tolerances. Finally 
the data 2R, Z, t^ and V(t^, ^kiFSb) ^^ proposed for vahda- 
tion after an additional safet>^ check between the vohune 
^m:ix ^nd V(tp. Xt.FSb). "^rhis hLsi step is necessary- to prevent 
the ablatkin \'oiutTie froni exeeedutg the value Vn^^ calcu- 
lated at the beginning, which is a "not-ioexceed'* ablation 
voiunie. This cati happen if the wTong k^ ajid tp are selected 
at the beginning of the LCA sitnulation. 

In case of a dangerous situatior^, a wanting message appears 
and a new focal lengtii is suggest eti even if it belongs to a 
flifferent re^ wi ^- At tlie end of the sinitilation, a compre- 
heasive final report is printed out for the surgeon's conve- 
nience. In paraHel, a central dat^ base is automatically 
updated for later review. Reports and statistics can be re- 
quested eit her online for direct suppnil in a si.>ecific case 
that neeiLs more attention or later for teaching and research 
activities. Video images stored during the artual operation 
can also be recalled^ t>rinted, ai^d attached lt> ttie report for 
the complete documentation of each case. 

Fortp = 0.4 s and tp = 2 s, equation 2 Ls tij^ed instead of 
eqtiation 1 . Tliis allows a faster cietennlnalion of the lin^d 
total ablated volume for a given X^. 



System Design 

By implementing a workstation-based design, each operating 
room can be equipped with a COj laser niainframe which 
can be interfaced to an HP-UX \\ orkstation able to perform 
several lasks simuitaneotisly in real time (Fig. b). For exam- 
ple, one task is the general supervision of the laser beam 
following the guidelines proposed, analyzed, and v^idated 
through the LCA algorithm. This can be achieved by using a 
laser control interface for dynamic a4iustmenl of the laser's 
output parameters imd by a multiplexer which physically 
checks that the laser perfom^s as requested, Thi.s is done by 
using m\ optical device comiecied to the laser outjutt focus- 
ing head, which is also responsible for changing the laser's 
focaJ length and the beam mode. 

A second important task is netM^ork comnnttiication among 
several similarly e(:j!Jippe<l operating rooms. Kach utdepen- 
dent node can set\(i Li' A sininlations, intraoix^rativc data, 
video sequences, imd other results directly to a main data- 
base over a multiple-user local area network. The network 
also allows mutual point-to-point co mm itni cation so that 
operating room X can exchange data wjtli operating room Y 
for consultation. The database and the HP-l X operating 
system are resident on a network server The IX 'A applica- 
tion sofl^^are together with the related check routines is 
loadetl oti each operatmg room's workstation, which is phys- 
ically installed in a reserved area close to the operating 
room but not in the palienrs vicinity 

Tins method can increase the productivity of the operating 
room suite of a hospital. It also offei*s the possibility of biiild- 
hig a reference center for laser ap|>li(^ations in surgery, using 
a network concept that can be extended to otlter Institutiuns, 




End U^m 
Terminal 1 



Operating 
Tal>te 



Fig* 5. Sysi.oFn rlesign. 
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Conclusions 

The ij( A nieihnd suggasts a global but tltHailtMl set of guide- 
lines to be followed (luring on hoped ic surgery iisjrig d contin- 
uous wave C(h hiser beinn at differenl operating runditioiis. 
Critiral vus^fs can be siinuhited on PMMA simiples fiisl at id 
then Iratisferred to i>one tissue. It has also been shown how 
to Iriinsrerjirelirninaiy U'sl resulls from F-MMA to bone sam- 
ples for moving or nonnnjving CW laser beams. A computer- 
ized systen^ c*an store and control in real tinie tlw operative 
procedures arui a convenient database can be built foi' later 
consultation. Additional invest i gat ion is needed to test the 
validity of this method over a large variety of liai'd tissues 
and during the use of pulsed mxd superpuised laser beams, 
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Online Defect Management via a 
Client/Server Relational Database 
Management System 

The ability to provide timely access to large volumes of data, ensure data 
and process integrity, and share defect data among related projects are 
the main features provided in this new defect management system, 

by Brian E. Hoffmann, David A* Keefer, and Douglas K Howell 



The (iefect maiiagenient syytein, or DMS, descnbecl in this 
atiicie is an online transaci ior^ processing sj'Steni for manag- 
ing flefeet^s found during stjftwiire and fiimwarc^ develoj>- 
meiM ajid test. It wa.s tievf loped to enable HP's Boise PriJiLer 
and Neiwork Printer Divisions to nimiage shared defrcls in 
leveraged and concujTen! products imd tcj increase data 
mtegtity and reduce overall dereti processmg time. The 
DMS application is based on aii off-the-shelf relational daia- 
base management system, which employs a client-serv'er 
arcMtecture ninning on an HP 9000 workstation. The devel- 
opment team emijkiyed an evolutionary delivery process to 
ensure that the .system met user needs ajitl ust-d proprietary^ 
4GL (foLirtb-generaiioa hm|*iiage) prograinn^hig tools t(j 
niaxijiuze productivity. Tliis paper summmizes the rationale 
for buikiin^ DMS, detaiLs its implementation and design, and 
evahiaies the system an<] its development process. 

Baek {ground 

Since tlie inti-oduction of IJie fust Hi' l^userJel luinter in 1984. 
increasing eus( t>rner demand for L;iserJel tirotlucts has kei>l 
HPs printer divisions on a steady growth curve for yeais. 
Market demanti for new jjroducts with incre^ised capability 
h£is coTitmualiy cballcHiged the R^D and quality assurance 
organizations to scale up their activities, while improving 
overall pjoduct qu^iJily and rehability. Fiiithenn^)r(\ compet- 
itive pressiues for im reased frequency of product introduc- 
tions with shorter deveh>i>irient times have cluillenged tlevel- 
opment t^ams to drive out process inefficiencies so they can 
develop more complex products in less time. 

One of tJte resfjonsihilities of the software quality organis^a- 
tion is to provide extensive defect tracking and software 
process measurement services whi( h enable RM> nuuiage- 
ment to gauge softwaie qtjality and t'iofluct s<'hedule iievih 
racy. This also entails maintaining all liistorical defetl data 
on l^serJet iirul related products, which |irovides nuiungi^- 
ment infonnatitm about historical prfKliict i|iiali[v mul past 
and present project schedule trends. 

As R&D activities ei>ntinu(H! to exp«md, we foimd that our 
ability to support the (^sisling defec t tiacking system l)e(*<ime 
limited. Foreseeing a!i inability to manage defect inrorma- 
tion and software nu'trics at this scale with existing totjls, 
we set otit to develop a delect tracking system that could 



operate mider these demands as well as tackk^ some of the 
more difrieult defect tracking challenges. 

Existing Problems 

Many features required for tlie divisions* defect tracking 
process w^ere not supported by the old defect tracking s(jft- 
ware* 0\^er tinie our process tiad evolved into a largely 
manual system witli limited electronic assistance. Pig. 1 
gives an overview^ of the key elements of our old defect 
tracking system. 

Three physical eleitients were required for defect. aubn^iUal; 
a paper submit form, defective hardcopy (if apphc:abie), and 
soiu'ce files (if applicai>le). Since the existing (pre-DMS) 
defect tracking softwaie was unable to tnmslate some of 
tJiese elements into im accept^ible electronic form, manual 
translation anti filing processes became necessary. This mix- 
ture of burnati mtd electromc processes created problems in 
the follow ing ai*ea,s; 

• Volume.sensitiWIy 

• Tracking defects duoitgh concurrent projects and code 
leverages 

• Data and process iniegrity 

• Time hn ess. 

Volume Sensitivity. Among all the pmblenis with the previous 
defect t.rackhig system, voh nne sensitivity wus the most 
notal>le. Becairse of the serial natiu^e of the old process and 
its requirement for extensive luunan assistmice In move 
defects through the systeni. bottlenecks wtitihl txx ur u rider 
ajty serious load. Many stejis required rnanuiil uUerv^ention 
by engineers imd adtninistrative assistants to drive a defetrt 
through its complete cycle. As a result, the labor denuu ids 
imposed by the defect tracking system became a liemen- 
dons tmrdcTi as thc^ number of defects submitted by pmjects 
in crease lb 

Concurrent Projects and CorJe Leverages. Nearly aU the IIM) 
projects that tracked defects were code leverage efforts 
rather tbim new code development effort.s. In atklition, ntauy 
leverages of similar erjde were o< (itrring simultiiiieonsly 
among t>roJects at multipJe sites. However, no utility or pro- 
cess in tlie defect tracking system dealt directly with the 
(jrobleni of tracking defects in leveraged code. The problem 



\ii}^\iHi l*M) I U'wUh M-'iirkjirfl .lni.ii-n:il 73 



)Copr. 1949-1998 Hewlett-Packard Co. 



Sourc0 Files 



o 


® 

D 



Defect ivG 
Hardcopv 




SuiiiijtfiQpiiftiJjSiiifli 



Fig. 1 . The origmal tpre-UMKJ 
dpfecl tracking sysJetii. 



was particularly noticeable at the beginning of a leveraged 
project when R&D engineers were required to read ejitire 
databases of defects to identify unresolved problems in in- 
herited code. In addition ^ no formal notification mechanism 
existed that would notify R&D engineers, for example, that 
the code diey inherited last week received a new defect 
today. 

Data and Process Integrrty. An nnforlimate and costly by- 
product of a system witiioul data and process iutegnty 
checks is data comiption and unknown data states. Our old 
defect trackii^g system was no exception to this rule. Given 
the relatively opvu flat -file tlata structures ;md r^ften unreli- 
able e-mail -based transaction sciienies of this system, wc 
often scrambled to recover or reconstmcl a lost or ijrokert 
defect record— an activity tJiat often consumed all the time 
of the defect ti^acking system adniinistrator 

Itmenness. A fijuij weakness of the old defect trackiii^ system 
was its inal>ility to provide timely access to accurate defect 
information and |)roject metrics, yince porlioiis of the pro- 
cess were distribtited among various people antl totjis, iastiui- 
taneous information was not always available. Even simple 
requests for defect iiifonnation might require assistafice from 
the defect tracking administrator or si)ecialized n>ols. This 
sen al process an d its \\ at r 1 \ wo r k of c o i n j i o r w u t s pffecti ve ly 
inhibited the free flow of defect infonnation to R<^n. 

DMS Features 

Implementation Guidelines 

To maintain focus during the implementation of DMS, the 
following guidelines were established to iissess whether 
DMS w^oiilri achieve its design objectives: 

• DMS must seamlessly and automatiealJy encapsulate our 
okl defect process model whicli has proven itself in the pash 

• DMS must rely on a client-sen.' er arehitet t ure to deliver its 
capabilities \ia a network to as much of the development 



community as possible, while centrally maintaining and 
ensuring 24-hour, seven-day continuous operation. 
* Given the rate at which R&D mid quality a^m ancc pro^ 
cesses are adapting to keep pace with market demands^ 
DMS must he able to adapt and embrace additiontil process 
refinements as they evnl\^e. 

DMS Process Encapsulation 

On the surface, DMS Ls an orihne database apphcation fliat 
offers engineei^ and manageis full electronic- access to defect 
mfomiation. DMS is much more than Just a data collection 
and reportmg tool, it is also an electronic mechiuiism lliat 
supports the defect tracking process that we ha% c proven 
and refined over lime. 

DMS functionaMty is divided into six core and six aiixihary 
fmic tions (see Fig. 2). The core functions were identified as 
the minimal set required for ixn opcrationai system. Auxiliaiy 
functions were added incrementally in subsequent releases 
of the tool. The core functions are Submit, Receive, Resofve, 
Modify/Delele, Update, and Verify. The auxiliaiy fiinct,it)ns aie 
Screen, Screen Resolve, Screen Update, UnreceivE, Unresolvet and 
Unverify. With the exception of Update, each of tliese fiinctions 
causes a defect to move from one state to another The 
states, whicli are rei:»resented hy rectangles in Rg. 2. aie Un- 
screened, Rejected Unscreened, Unrecerved, Open. Unscreened Resolve, 
Unverified Resolve, and Verified Resolve. Each si^ite represents the 
status of a defect record in the DMS database, 

DMS furvctions are accessed by the user from the mejuj 
items presented by the initial DMS screen (see Rg, 3). The 
Submit, Modify/Delete, and Receive functions are accessed 
through tlie Submit menu item, tJie Resofve and Screen Resoive 
functions aie accessed through the Resolve menu itent^ and 
the Verify function is accessed tlnough the Verify menu item. 
The auxiliar>^ fimctions are accessed thiougti the Update 
menu item. Users navigate DMS forms either througii the 



74 Aijgusr 1003 Ilewlett-Paf'kiud .Icjiinial 



)Copr. 1949-1998 Hewlett-Packard Co. 



Inirial Deiecl Entry 



Mail to 

Responsible 

Engineer 



Mail 10 
Responsible ^ 
Enginenr 

Mail re 
Submitter 




Mail to 
Originator 



Fig, 2. PuiK Uons aiid states m 
I )MS, The t^ircile^ renre.'iient cun* 
ftnuftiuitii, the octagons repre- 
atmi 'dimlhiry funcUons, mid Uie 
rf*c'ta]igk\s rc^pr(^f;<^'ril states. 



(■n!ilrnl keys shown in Fig. -J or by selecting 1 he tiesired item 
wKIi i\ mouse. 

Three role.s are played by DMS users, mid eatii role has a 
different perrniis^ion level. The roles are user (lowest per- 
mission level), screener, and manager' fhi||hest pennission 
level). Users typically perform the Submit. Receive, Resolve, and 
Verify funf tions. Stivejiers typit tilly [MTluvm ilw Screen and 
Screen Resotve lunclions. The manager pertnission level is 
rc*seived for intliviclutils who aie respunsible for adding anct 
fonfiguring prnjectjs in DMS. 

Sufamrl Function. This is where defect information is initially 
enleretl h\\n tlie liMS datat>ase, rcHLddng in the defecl being 
plaeed in I he Unscreened stale ( '^ in Fig. 2). The tiser Is re- 
gtiiretl to et\rer a minimal set of infonnatum i elating to tlio 
defect. The user also has the opportunity to a<!d optional 
information at this time. Submiders have the ability to at- 
tach boUi text mid objeet llii's to defects. These flirts rnay bt* 
of particular use to ei^guieers atternijting to ret>rortijce tuid 
repair defects. Otue a defett Is submitted, the user can 
continue to add additional jjifoniiation viii the Modify/Delete 
function ^ until the defect is s(Teened. 



hauljon is Ihe point at which I he defecl itdonnation is ex- 
mnined tor cojuplcteness and correctness, and the defect 
severity is added to the defect record. If insufficient infer- 
mati<jn is provided by the snhtniiler iben the screener may 
reject die defe< I, tdaciiig it in the RejEcted Unscreened slate * , 
Tlie act of rejecting a defect causes electronic mail to be sent 
to ni*tify the submiller diat die defect was not accepted* The 
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Screen Fund ton. This func tion is tyjjicidly prTf firmed by a 
penstin assrH-ialed with the fleveloptneiil (cam who has inti- 
mate knowledge of the pnxhicl or icMt pnjti'ss. Tlir Screen 



Fig, 3, !nni;d 1>MS Krrei'ti. [5MS fin u-i tuns mv uccesst'd fnun Ihis 
sci'fHii. 
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Fig* 4. One of foui pages of infoniialion presented to th^^ usei 
perfomiiiig a ^ct&m ResDlvE3 funetioTi 

suhiiiitler then has die option of rleietiii^ the defed or inofH- 
fyu\g aiid relun\iiig tl\e clefec^t to tlie Unscreened state via the 
Modify/Delete fiuirtion i' . It is important to note that this is 
the o!\]y point in the DMS process wliere a defect can be 
removed from die database. Once a defect has been screened 
it is assigned an identifying number and made part of the 
permanent project database upon its entiy into the Unreceived 
state '1 . 

Receive Function. A defect is routed to the person who will 
most hkely be responsible for defect repair \ia the Receive 
function. The name of the responsible engineer is obtahied 
from a datal.>ase list of till possible names for a given project. 
When a defect ii^ receive dn the defect is moved into the Open 
state anti an electronic mail notice containing the defect 
number and brief details about Ihe defec l is seiU to the 
person named as tiie responsible engineer * . 

Resolve fiinction. WTien a defect is repaired , tlie Resolve func- 
tion is used to adtl fix information to the defect record and 
prontote the defect to the Unscreened Resolve state ^ * Tliis 
function is usually perfonned by the engineer who enters 
the resolution code, the descTiplion of the resolution, aJid 
any relevant files. Dejiending on the resolution ct>de. other 
information may be required as wetL For example, if the 
defect is resolved as a CC (code c:hange) then the user is 
required to add the name of at least one module that was 
changed. 

Screen Resolve Function. Tills fuiirtitHi allows the project 
scrt^ener to scan the resolved defect to make sure that the 
resolution infoi'mation is as complete and corrert as pos- 
sible. No additional infoniiation is atkled lo the defect rec- 
ord by this fimction. Screen Resolve allows each project, 
screener to make sure that the resolution information meets 
the stemdards set by each project team. If the resolution is 
rejecle<l by the screener, the defecl is returned to the Open 
stale, and electronic mail is sent lo the responsible engineer 
statuig that the rescjlution has been reject etl ^ . If the resolu- 
tion is accepted i>y the screener, die (Jefect is p!'onicJted to 
the Unverified Resolve state and the submitter is sent etecti'onic 
mail stating tliat the defect is ready for verification ^ , 

Fig. 4 sliows otte of four pages of information presented to 
tlie user peifonning the Screen Resolve function. Ttie user can 
switch between pages with ifie View menu item. Tlie File 
menu item Is used to move files between die HP-UX* file 



system and the defect reconi. The Update menu item allows 
asei-s access to the Update functit)!!. The hoflom two lines of 
the fonn show that the delect is shared between two proj- 
ects. The defect is in an Unscreened Resolve slate for project 
Training_l (pr - Unscreened ResolveJ and in an Unverified Resolve 
(r = resolve) state for project Train in g_2. 

Verify Function. The submitter uses the Verify function to deter- 
mine if Ihe defect is fixed, if the resohition is accepUible to 
the submitter, a verification c-ode is added to the defect and 
it is promoted ttMJie Verified Resolve state ( i in Fig. 2), It die 
submitter decides tliat die defect is not repaired then the 
project, screener is notified. The screener lias the capability 
to return the defect to die Open state via the Un resolve function. 

Undo Functions. Screencrs also have the ability to mrwe 
dclVcts Iron I ihe Verified Resolve state to the Unverified Resolve 
state via the Unverify function ami from the Open stale to the 
Unreceived state via the Un receive function. When a defect is 
moved to a previotis state all information that was added by 
the previous function is lost. For example, when a defect is 
unresolved the inJfomiation added by the Resolve function is 
lost. 

Update Function. Wlien a defect is in the Unreceived state imd 
beyond, changes are made to the defect via the Update f mic- 
tion. Changes made to defects by this functioii are either 
applied directly to die defecl recoi'd or placed in an update 
queue based on the ft>IU>wjng criteria: 

* if the persoii perfortutr^g the update is a screener or is listed 
as a resporKsil)le engineer for die ijroject that owns the defect 
then tlie ujKlate is applied to the defect record. 

• If the tierson peiformiiig the update does not meet the above 
criteria i hen the modified defect record is placed in the up- 
date queue where a screener must approve the modifications 
before tliey are apphed to the defect database. 

There is also a set of configurable niles that may force an 
u]jdate into the update (|uene. If the screener rejects the 
update, electronic mail is sent to the originator of the update 
about the rejection ( J ui Fig, 2). 

There Is an addidonal process step not shown in Fig. 2. It was 
pointed out to the DMS developers that in the early stages of 
a project , engineers frequently find and fix a great many 
defecLs in a very short period of time. Tlie enghiecrs foimd it 
ver>' time-cons ummg to submit a defect mid wait for another 
mdividual (perhaps two) to scieen and rec^eive a defecl so 
that it could be resolved. In Uiis case the DMS process was 
seen as a deterrent to collecting complete deft^'t history. The 
process model was modified in the third release of DMS to 
allow the responsible engineer to move a defect fiom the 
Unscreened state to the Unscreened ResoJve state via the Resolve 
Unscreened function. This function can be performed only if 
the submitter and restjlver are the saine i>erson, and die 
resolver is the responsible engineer for Uie project that 
owns tlie defect. 

I'sers can readily detennine the distribVilioi> of defects for a 
project through die project snapshot screen tsee Fig. 5). 
Accessed from the Report menu item shown in Fig. 3, the 
snapshot shows the number of defects in each DMS state 
and the bugweij^ht. The bugv^' eight metric is calculated as 
the sum of severities squared for aU defects in the Open and 
Unreceived states. 
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DMS fully encapsulates this six-step process and subjects all 
inconuiig defect infoniiation to rigorous process checks. 
Users call rely on the knovvknlge that defects me m preiUcL- 
able states and benefii froiii Ihe valuable process metrics 
that are derivt^d by measuring tnmsitions from stare to state. 

Client/Ser\^er Architecture 

Another DMS ciiaracteristic that provides die foundation for 
many DMS services is the fact tiiat it is buih on a conuner- 
cially available clienl/ser\x^r EDBMS (relational database 
managemem system). Among the many beneill.s uf a client/ 
sener database aichiteeture are distributed processing. 
hett-Togeneous operating environ luents, mul ehmination of 
many configuration management problems. An additional 
database feature that enalilt^s DMS (o guarantee data mid 
process iiii('{^rily is tnmsaction manaLSi inetit. Since DMS 
tises the OWV (ojiline transaction processing) capabihtiea 
of die underlying datal.iase, all operations tiuit modify data 
in DMS are nested iji real-time transactions, ModiHeation 
requests that fail as a result of invalid dat;i or hardware fail- 
ure, for exani|)le. tlo not coniipt existing data, tiatl tnuisac- 
tions are autotnatically rolled back to knowt\ previous 
states. See "C'lienl/Sei^^er Database Ai'cliilecture," on page 78. 

Defect Sharing. One of DMS's most, inipoitant implementa- 
tion details is the relational structure of a defect record. By 
making use of tradhional relaiinnal desi^^ti guidelines, defect 
record in^plenientation in DMS t^iTHblt's information for one 
project to be shai ed easily with a record from another proj- 
ect. As Fig. fi indicates. thepre-DMS iniplenientation of a 
defecl record consisted of proje(!t-(lepen<Ienl submit and 
resolve infornuition, which could not be easily shareti 
bet ween p roj e c ts . 

In DMS, relational stnjcturing has been used to separate 
submit information from project-specific resolve data» One 
submit record am be sliiued among many different projects, 
with eacii projeci having a tioteiilially unique resolution re- 
conl Til is model is sliowri m Pig. 7, The m£\ior bene 11 Is of 
this struct utc arc twofcjkL Mrst, all projects chained with 
the same defect automatically share project independent 
submit informal ioji. S^^'cond, tlu/ siructurc [aovides an auto- 
tnatic cominuniratinn ])aih for |*roji"ri <k|>unden( resolve 
infoniuition to al] the prfjjecls tliat share the defecl. Thus, 
eacli projeci r<ui quickly obtain iuiotlier pr{jject s status 
intbrniation for a shared liefecl. 



Projeci A 




No Sharing 



Proiect B 



H'^'H 



Fig, 6. A pre- DMS defect record consialed of projeci dept^rident 
SLibniit and resolve iiiForniaLion tied together in one reeord slniftnn^. 
Shaniig tUA%^(-t irjfnrnifitifm between tfrojeel*^ vvas difficult. 

Flexible Architecture. DMS luis been able to derive several 
benefit-s trorn its relational implemcntarion. Of these bene- 
fits, structural extensit>ility is perhaps the most inipiirtant. 
Given diat tjie sysieni was tlesigiied cind implemented iiy an 
evolutioiiaiy delivery model, a refalionaJ architecture 
proved to be an ideal complement. Existing stiiictmes can 
l.>e easily reused and new stmciures can l>e adtiecl without 
massive stnictural rew^rites. For examt>le, el;il)orate user 
configuiabLlity was not suppoited hi early releases. For sub- 
sequent releaseSj however, it was a suuple matter to add 
user configuration tables to the schema wid:iout altering 
existing defect record stnictmes. 

Ccfinectivitv. DMS's client/server architecture has also en- 
liiinced vari^jns aspects of comiecti\ity. The |)hysical separa- 
UtjJi ol^ data marupulation code (back end) from uset^ interface 
code (front end) maximizes modularity, resulting in ntore 
readable, less (^rror-prone code. As a side benefit of t lie sep- 
iuatiou, irvcrenienlal fuiulionality can be added to the front 
or back end of the code while online without affecting either 
end. fVon^ a m«untenance [jersjjective, the client/server ar- 
chitecture elimuiates tuauy i raditiojial confirmation maiv 
agenu^nt headaches. Soflware distrilaition t)rol)lems, for 
examjile, are elinhnalt'd sitire t'lienl interfat e code is ex- 
ported to users on the network from one central location via 
NFS. From a network persiJeclivc, a heterogeneous client 
environnu^ni is fully sup] Kn table. Since the seivTr requires 
no knowledge of client type, multiple client platforms have 
e(|ual access to DMS. 

Robust Operation. TYansaction management capabilities 
round out the list of maioT DMS features. Given tiiat DMS 
was a migration to a multiuser oritine transaction processing 
system, full iriiiisaction mbitration became a must. During 

(coniinued an page 80f 
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Client/Server Database Architecture 



OatabasE; martayernEiril tiys terns implemented under Lilientysarver computing 
models have er;ayed increasing popularity m recent years, Advanced networking 
capablikfes coupled with pow/erful mimcomputer and micfocompuier systems 
connected to networks have favored clienty'server database archiiectures over 
more traditional certtralfifed database management systems. While tlie specific 
benefits of implementauons vary, client/server databases typically disimguish 
themselves in four gen em I categories 

• Separation of presentation services from data rrtanipulalion services 

• Scalable high performance 

• Server-enforced integrity and security 

• He terDg entity and distribotiun autor^omy. 

SaparatJDn of Preseniaiion and Data Manipulation Services 

Unlike traditional centralized database;^, c I leniy server database environments cleanly 
separate presentation [user interface) services from data rnaiupulation services A 
database client pertorms all application or user-specific services necessary to 
convey information to and from a user The data seiveT focoses all services ort ttie 
efficient and secure manipuistion of data conveyed to it from the client Fig 1 
illustrates the labor division in traditional arwl clreni^server architecturei 

The net resolt of this separation is an optimom dEvision of labor: data management 
and transaction funcliDns are managed independently from user interface and pre 
sentation fonciions, The benefits of this approach are twofold First, distfihotion of 
client services to each client CPU enables the server to maintain a respectable 
response time perfomiance advantage over traditional databases. Fig. 2 shows 
typical response curves for traditional versus client/server databases Since dent/ 
server databases are less demanding of operating system overhead, they tend to 
perform better under load. 

Tfie second major benefit of the chent/server separation is the leverage of exist 
ing CPUs on the network. Clieni/server architectures stretch an organijation's 
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overall CPU mvestmem by ensurmg that overall process! rig loads are properly 
balanced between client and server processing 

Scalable High Performance 

A unique petfomiance trail uf most client/server database architectures is their 
abiJity to enhance server performance much more tfian traditiortal database archi- 
tectures As seen in Fig. 2. response time as a function of user load tends to scale 
more linearly under client/sen/er architectures. This pertormance advantage is 
often rooted in the fol lowing design fundament els; 

► Use of stored database procedures, which often include control flow extensions to 
the data manipulation language 

» Use of remote procedure ca Its jRPCs] for server- to -server communication 

► Implementation of the server as a single multithreaded process in the operating 
system 

Stored procedures are the hallmark of clietvt/server databases. Typically, they exist 
as speciafized database axecotables. These exec u tables are constructed by com- 
pilmg source statements from the same data manipulation statements le g.. SOU 
used with the server m an interactive fashion Once a procedure ts compiled and 
stored 111 the datahase's data dictionary, an application can issue a run-trme call to 
the procedure. The procedore then executes t^te same data manipulation or query 
that was defined by the source stateiDents that built the procedure 

Stored procedures offer many major performance benefits. Frst, network cummu- 
nicaiions are dramatically reduced since one procedure call rep laces many individ- 
ual data manipuJation statements Second, since stored procedures are already 
compiled at run time, performance measurements indicate that they can process 
data mampofation statements five to ten times faster than a sequent;e of single 
data manipulation statements, fig. 3 illustrates the ejtecuiion differences between 
stored procedures ar^d ifaditianal database servers 

Third, stored procedures often possess the ability to control logic flow in database 
operai:ions. Control constructs such as branching and looping combined with the 
ability to declare local variables and create temporary database objects, ^ocii as 
tables, enable stored procedures to perform complex data manipulation seqoences 
Stored procedures can also be oested to ihvoke a series of database events with a 
single function call 

Another feature high-performance sen/ers possess is the implementation of the 

server as a single aperating system process while accommodating multiple simul- 
taneous client processes. Fig. 4 illustrates the architectural differences between 
single-threaded and multithreaded server implementations 

A multithreaded server design frees the database from nearly all of the operating 
system overhead that limits traditional database architectures Far example, the 
amount of memory required tor a database user connection in a multithreaded 
implementation is around 50K bytes In contrasL traditional smgle-threaded serv- 
ers can require up to 2M bytes of memory per user connecttoa operating system 
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Dverfiead included. Hmce. mulii threaded server impJernentations make rrare 
memory available for disk caching end other appfic:ations 

Server- Enforced tntegnty and Securitv 

[he d J ent/ server approach a!?iQ has niany advantages in preservmg the integrrty 
Qf information in a datatjase Unlfke Traditiorai approaches to maintaining data 
and pmcess inlBgrity. business rules and data transactirjo checks in a clienr/sen/er 
database environmeni are ejiclosively enforced hy the server Opportunities for 
data corruption resultrng from mamtenance efforts are signifrcrintly reduced, since 
bus mess ru[es and transactions onJy have to he modified in the sbvjpa instead of 
irr every client application using them. 

A specific mechanism often emptoyed by a cJient/server database tor enforcmg 
integrrty constraints is known as the trigger A trigger is a special type of stored 
procedure that \$ attached to 3 table and automaticafly called, or triggered, by an 
attempt to insert, delete, or update data in a table. Since triggers rBside in the 
server with the database, they are particularly effective as integrity mechanisms 
since they adopt a data- and business -rule- driven approach to integrity, as opposed 
to an application-conimlled iniegrity approach Trigger code is written only once, 
instead of many times in multiple client applications. An application cannot avoid 
hring a trigger when it attempts to modify data rn a table. 

Another common use of triggers is for the msinterance of internal database con- 
sistency, or referential integrity For example, duplicate data rows m related tables 
can be prevented by a tjorqueness constraint defined in an insert trigger of either 
Of both tables to guarantee the one-to-one unrque re Ian on. ship that exists be- 
tween two tables. Since client applications cannot be relied on to maintain the 
consistency of a database, triggers prove to be the ideal mecltanism for this task 

Some integrity mechanisms seen in client/server database environments impose 
data constraints on smgle data fields directly. These mechanfsms include rules, 
defaults, and user- defined data types A rule is a programmable mechanism for 
performing condiijona! data checks such as data range checks or conditionaf 
comparisons as well as structural checks on data syntax. Defaults simply provide 
a user-specified value on inserts m the event that one is not provided with the 
insert statement User-defrned data types provide integrity on values that are at 
higher levels of abstraction than numerical types alone provide Some higher-level 
user-defined data types mrght include money, color, or postal code 
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Heterogeneity and Dlstributron Aytonomy 

Client/server databases deliver an open architecture that facilitates portability to 
and management of the ri^ultivendor compnnent'? within a networked computing 
environment. Hardyvare independence is much more easily achieved in client/ 
server situations smce the architecture can cleanly divide client hardware from 
server hardware Furthermore, most commercraf vendors of client/server database 
envrrnnments offer mechanisms for easily hnking different operating platforms 
together Thus, existing and new hardware resources have a much higher compati- 
bility likelihood and can therefore be used more efficiently Additionally, hardware 
budgets can be spread further and take fiifl advantage of downsizing to work- 
statrons and supermicrocomputer syF^tems. 

In addition to supporting hardware independence in networked database environ- 
ments, [jhent/server interfaces also permit open communication in hetemgeneous 
software environments The same formati?ed software rnterfaces that connect a 
cf lent to a server can be leveraged by other applications or software environ- 
ments. Foreign tJata sources and applications can be seamlessly integrated into a 
chent/server database environment 

AI^Dugh tire cfient/server approach breaks down the traditional barriers that 
prevent data disinbulion, it simultanenusly creates potential for excessive com- 
plexity in distributed database processing As the risk of data corruption increases 
With the complexity of distribution sc-hemes. the old "centralize versus decentralize'* 
debate becomes justifiably fueled Fortunately, implementation under a Ghent/ 
server approach does not require an all or nothing approach to distnbution of the 
database system. Developers are free to choose the level to which the database 
system is to be distnbuterf. thus retaining a high degree of autonomy on the issue 
of dtstribution Furthermore, thr? client/server approach allows developers to 
evolve the system incrementally toward more or less distribution as required by 
theapplir:ation In tradittonal database architectures, the choree is fixed, with 
evolution to more distributed and heterogeneous environments made virtually 
impossible. 
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hea%y operation, the server reliably conducts more than 50 
simultaneOLLs client sessions. A hpneficiaJ side effect of 
transaction management for DMS is t hat the integrity of all 
process steps cim [>t> maintained. Any process change that 
failK will simply l>e lulled hack. Transaction management 
also provides the capability to assign user pennissions to 
process transactions, With transaction rules and user roles 
ftilly defined in DMS, all process r\tles viW be enforcetl 
through user i>ennissions. 

Physical Overview 

DMS is implemented in two distinct components: a datii 
server and a user interface client (see Fig. 8). In addition, 
nvail clients ;iiid report clients exist that can also interact 
with tl\e ser\er. Tlie data server is a conmiercially available 
relational database that contains the procedures, triggers, 
niles, and keys that control data niaiiipulatiou. These ele- 
ments are stored in tlie server as part of the DMS build 
process. 

Stored Procedures. SI ore d procedures are database routines 
that are const nic ted from individu;ii data mariijnilation state- 
ments. They reside in the data seiA-er as database exec tital>le 
routines. Similar to htnction calls in programiTung languages, 
stored procediues can accept input arguments and return an 
exit status, liowevei; luiMke trailitioniil f mictions, stored pro- 
cedures can return a variable-length streiuii of data, which 
is organized into roW's imd columns, Colimms t>pically rep- 
resent data fields, which are jjlaceholders for inibnnation in 
a database talde. Row's usually represent the data records 
that are stored in a database table. Results are topically re- 
turned in ASCII tabKieliniited format for presentation or 
postp r ocessing. 

A stored procedure may contain one or more hatches of SQL 
(Structured Quej^ l^mguage) statements. The SQL state- 
ments make use of input arguments (if any), perfonii some 
data manipulation operation, and rettmi a stream oJ' tor- 
matted data (if any) to the client application that made the 
call. In additioii, stored procediues can make use of coiiti^tii 
flow constructs such as if. else, while, atui so on to i>erfonn 
complex data manipulation tasks. Stored proceiiitres can 
also call other stored procedures perfomung a series of data 
manipidation operations witJi a single function call. In DMS 



stored procedures are used exiensively. For example, the 
entire DMS process showii hi Hg. E is supported as a series 
of stored procedures. 

DMS clients are able to call stored procedures and receive 
data ret 111 net! from them via a bitiirectional communications 
protocol In DMS, tins protocol is fully sui)pfjrted by the 
database manufacturer in the form of a series of libraries 
that Imk the uspr interface foiiiis code with the database 
manipulation language (e.g., SQL). 

Triggers. Operat ions perfonned by stored proct^dures that 
modify data may cause the execution of a sender trigger. A 
trigger is a special lypi" of stored |)rocedure iiistallefi on the 
server to ensure the relational integrity of the data in ihf 
DMS datai>ase. Any ojieration on a table or column tftat modi- 
fies data win cause a trigger to be executed. Triggers are used 
in DMS to ensure that all operations that modify^ data are 
carried out consistently throughout the database. For c^xam- 
ple, a trigger will prevent a user from being deleted from the 
DMS database if that user is referenced in an open defect. 

Rules. Rules are another database object used in the DMS 
process to enforce integrity constraints that go beyond 
those implied by a ]>articular data type. Rules aie apjilied lo 
indivi<Iual columns of tables to etisuie that the values aii- 
jdied by insen or update operations contorm to a patlicular 
set nr range of possible values. For example, the table col- 
unm that denotes the state of a defect is a character data 
type of u}} to two characters. The rule applied to this column 
ensures that a prospective insert or update will not succeed 
unless the new^ value corresponds to one of the seven states 
shovm in Fig. 2, The following example illustrates this ruler 



create rule siatus^rule 
as ©status in ("n '\ "m" 



pr 



Tlie states "n" and "nr" refer to the Unscreened and Rejected 
Unscreened states respectively. The reniEiining states repre- 
sent (in order) Un received. Open, Unscreened Resolve, Unverified 
Resolve, and Verified Resolve, 

Tables. The DMS database is constructed of a number of 
rabies. Tlie tables serve to gather data items into logically 
related groups. Separate tables exist to contain infomiatjon 
relating to the submit and resolve portions of defects. Other 
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rabies pxist to mamtain information about fixod niofliiles, 
attached files, and aiudliao' infomiation. There is another 
group of tables that maintain information about projects, 
asers, and DMS sender sites. These tables iire related to one 
another via sender keys whirh servT to map the relation.ships 
between tables in the database and help ensure reiational 
Integrity (see Fig, 9). When a stored procedure that returns 
rows from more than one table is executed, keys are used to 
make sure that the information Ls joined |.>roperly and that 
the data retunied does not contain any unwanted rows. 

User liTterFace Client. Tlie user interlace client is constructed 
from a ( omniercially available 4Gtj forms language and a 
custom C language run-time executive. The forms language 
development environment aOows the rapid t onslnxtion and 
evaluation of grtnips of atomic user interface objt cis hke 
input fields, pull-down menus, and form decoration. Stored 
procedure calls are triggered by these atomic objects caus- 
ing the sender to generate rows of result data. The fonns 
language is designed to ruimage returned data rows effi- 
ciently with a mituinal amount of client codhig. The C lan- 
guage nm-time executive provides the mterface client with 
access to IlP-rX^' comnumds and custom C fun(lit>ns. ^faiI 
generated by DMS origituites from the chent imerface 
through the mailx(l) crjiumaufi Files that aie attacbetj to de- 
fects are loaded into the server via a (all to a C fu net ton by 
the interface client 

The user interface chent can be compiled to execute on a 
number of hardware platforms. In addition to IIP 9000 
Series workstations, users routinely exe<"Ute tlw tool from 
networke^d Macintosli computers rimning Mac-X £md PC- 
compatible computers running X server software or VTIOO 
terminal emulation. The latter is particularly convenient for 
asers who wLsh to run the tool from hfjrtie via modem. Fig. 10 
shows the DMS interfacf^ as seen froni a VTlOO terminal emu- 
lator The example in Fig. 10 shows tlie lofikup chcjices given 
to the user for the "how found" field of the submit funct ion. 
The main difference between this and the XI 1 luesentation 
is that the user must navigate the fonns via control keys 
instead of a UKHise. 

Utility Ctients. Oiher tyties (vf clients, tyihcally report, clients, 
can be created using V language librtuies purcltased from the 
database miimd'actiirer. Programs genernted using these 
bliraiui'S differ from olhc^r lypes of host language interfaces 



that rely on embedded SQL. llie libraries do not require a 
host language precompiler to process the source code into 
some intennediate form. These libraries have been iLsed to 
generate castom repoHing tools which can be executed from 
any suitably configimed workstation as illustrated below: 

S SLjbnum -file parms -proiect SUNFLOWER - sort sybmitter J 
extract i csv_report > reportjile 

Tlip client subnum generates the key values for every defect 
belonging lo project SUNFLOWER which meets the criteria 
contained in file parms ordered by the name of the submitter. 
These key values are piped to the client extract which pulls 
infomiation abom each defect from the database. This infor- 
mation is dien piped to a text processing script and deposited 
in a nie. I -sing Oiis scheme, data can be extracted from the 
DMS database and readily formatted for spreadsheet apph- 
cations as well as plain ASCII text rejjorls. Additionfdly, tliere 
are a number of iJiird-paity .soOware vendors I hat provide 
products that are designed to interact with UMS provided 
t hat the PC has network access to the data server 

Execution Environments, [)MS data servers are typically set up 
on dcflicaN'd hosts. Tlie server at our division serv^er is cur- 
rently inst:illed on an HP SHKIO Model 710 computer config- 
ured lo comiect with up to 200 simultaneous clients (see 
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Fig. 11), Client cridp may reside on aiiy suitably configured 
workstation. For ( nrni'ivieiue and inaintatiiatHfity we have 
plared the user interface client cficie on a single HP iMKK) 
Model 380 serv^er which distributes the code i.o oiher client 
hosts %1a NFS. 

Reporting and Searching. Reports can he generated from r>MS 
vi<t tlie Report nuMiu item from lh(^ (op-level form shnwu in 
Fig. *1 A vatiely of canned re]iorts are available as an aU-hoc 
query mechanism. Fig. 12 shows how a user nuglti geiieralc 
a report, of ail open defects for a particular engineer. Wlien 
initiated* the interface jironipls die user for I he nanu^ of a 
responRilih^ engineer from a list of responsilile engineers 
who havi^ open defects for a given jiroject. I ^sers can readily 
generate reports of open defects t:»rflered by suhniit rnunt>ei; 
submit date, severity, and otheis. Fig. 13 shows a summary 
list of open defects ordered by sut^mit rumiber Tliese repoits 
can be printed or saved to a file in a number of Ibnnats. 

The ad hoc query mechanism allows customized summary 
reports to he generated based on ;iny coml>inatif>n of selec- 
tion criteria. Tliis utility can he osetl to produce, for example, 
a list of resolved defects for a given project with a particular 
suhniit version, resolution code, and fix lime greater than 
eight hours. These custoiniKcd reptiits are generated by the 
Search Editor selection shown in Rg. 12. 



We use PC-based and HP-I^-based spreadsheet packages to 
produce cusioni graphic reports t>)r taTiJect management. 
These reports aie generated antl distributed tin a weekly 
basis. Tlie reports can also be generated on a demand basis 
l)y the indivitlual project teams. Figs. 14 to 18 show samples 
of some oftlie.se rep<nis. 

Current Status 

E>MS is currently in its foiirlh release after two years ^^f de- 
veloinueni. The latest release, %^ersion 2.0. etjniains iill of tlie 
oiigiiial laigel hint tioiialily aiul asignificam i\uml>er of user- 
rei J nested enltaiK^enients. This latest release contains features 
that allow nnline project configuration, user configuration, 
and defect modi fir ation. These features, along with other 
new features, reduced the amount of system administration 
time to expected l(*vels. Enliimi enients in vcreion 2 J) in t hide 
changes to make similar operations exhibit more consistent 
heha\inr throughout tlie tool and changi^s ifj ttie detect man- 
agement process to satisfy tlie (ienionstratetl iiee<Ls of pro j- 
eei teams. Finally, the <Mihancementspjovided in version 2.0 
of IJMS that luive evolved over several releases rcllcct the 
rnattutty of the pmduct and the relative stability of the 
feature set.. 

Currently DMB is in use at six IIP divisions on four sites. 
More than seven iiundred users in \lM.y, ilk, <md technical 
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Fig, 12, A screen for generattng a list of defects beiongiiig to a 
particular engineer. 
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Date 



Fig. 14. This reporl shows huw Un' ratio of tJr/fecl fmd rale to defecL 
Ik rate caji be used to track ongoing project progress. 

support have logged over 7500 defects against 25 m^or 
project^s in 18 months of use. 

Lessons Leaxiied 

As anticipated in early design sessions, choosing an interface 
toolset with incomplete graphical user interface capabilities 
proved to be a signiHcrant hurdle for many usei-s. In its cur- 
rent form, DMS employs a character-based windowijig 
scheme that runs in both XI 1 and ASCII keyboard environ- 
ments. Wliile this interface style nuccimii^es connectivity, 
allowing virtually anyone with IAN access to use DMS, it 
has proven to be a tough sell to R&D users who expect tools 
to exhibit an OSF/Motif look and feel As a result of the deci-- 
sion to trade off cormectivlty' for XI 1 and OSF/Motif support, 
more non-XI 1 users have access to DMS at the expense of 
XI I users who aie inconvenienced by a more primitive 
interface, 

WliiJe an evolutionary delivery can l>e used to deliver just-in- 
time functiontility to users, om* cannot underestimate the 
importance of user involvement in making design decisions 
and prioritizing implementation tasks. The users group and 
steering committee proved to be successful tools in guiding 
the evolution of DMS. The users group is an open foixun Uxat 
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Fig. 15. This report tracks open defect counts against estimates of 
Ijrojected open defect.^ necessarj' to meet a scheduled completion 
deadline. 

aDows communication between users and developers. The 
steering committee consists of a group of expert users who 
ensure that the tool evolves in a consistent direction. 

Conciueiion 

DMS has achieved its objective as an "industilal-strength" 
defect management solution. Since its introduction, it has 
been used to manage defect information for many Ilagship 
products over many divisions. It has proven itself as a 
24-hoiu' a-(lay workhorse, ser\ing as many as 40 to 51) sinml- 
tajieous users durijig nonnal busmess houn?. In fact, the 
real-time reliance on DMS has necessitated scheduled main- 
tenance during late night and weekend hours. DMS enabled 
us !o extend its contribution into the R&D community by 
providing the services of a self-contained software process 
tool with minlnmm administration. As a result, DMS has 
iiicreased the scale at which we can provide defect tracking 
services without incurring significant personnel increases. 
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Fig. 17. Ttiis repfjrt, givf^H a measure of overall software:' qnaljty 

(hug weight) over lir:!*;'. 

Another m^or sucr ess for DMS is the tiegree to which re- 
lated projects can now sliarc defect iiifonnatifni. Based on 
the innrrcdiate acreptance and use of the rle feet -sharing ca- 
pabilities of DMS, users now actively treat defect informa- 
tion as sharable, and are conscientiously comniimieating 
witli other projects \ia this nicclianisra. For multisite opera- 
tkai, DMS successfully den loii.st rated the ability to cross- 
submit and cross-track t>ver nniltiple sites transparently. By 
making use of passive seiver-to-servcr conuuunication 
mechanisms, DMS ser\^ers at different sites can easily be 
configiu-ed to commumcate defect hifonnation. 

An ait^a where DMS has greatly assisted R&D management Ls 
in nxetiics analysis. Using vSQL, raw defect data is much more 
readily analyzed and <ionveited into a dif^estible foini. The 
rate at wiiicii more extensive ad hoc analyses can be deliv- 
ered bas gieatly increased. In addition, [irolecting process 
and data integiity tias enhanced the accuracy and reliability 
of aU cilleries, ad lioc or standarcf. 

Timeliness has been another m^or success of DMS. As can 
be seen in Fig. 19, DMSh^is succeeded in sboiteniug mucli 
of die defect lUe cycle tune fron^ an avei'age of days to hour's. 
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Fijj. IS, This report provides a cumulative sf"^mt:^nlE.^d view of 

ii!i]ir:.sf.>]vcid defects l)y severity. 



Fig. 19. T])S' tliffcTf ncp between the dc^fetn. life t vfilew fjefore anti 
iifter DMS, Tit is shnws tjie elapsed liaiG l^otween delect find date 

and engineer as.sign date, 

hi adciition to the direct benerit,s DMS has provided, we have 
observeci some interesting cultunil shifts in the R&f) and test 
commuiuties tti the prmter di^nsions at our site. Project tt^am 
memt>ers have come i;o place great reliance in the abihty to 
get uistmitaneous defect infonuatlou. Tlie rigorous process 
imposed by DMS ensures that all defects contain the mini- 
m Lilly required set of info nnai ion and that all of the informa- 
tion \ras been validated against centrally maintained lookup 
tables. Users have come to appreciate the ease with whicti 
defect: information can be located and mmiipulated 24 hours 
a day, seven days a week. 

DMS has also empowered users to manage defects within a 
proven process model. Givert that the number of projects 
and the defects they generate w^ill continue to increase, it is 
clear that the number of inrh^idnals needed to move a de- 
fect tlu'ough the pro< ess needed to be mimniized. DMS !ras 
been successrnt in that it has encapsulated a defect manage- 
ment process known to work for the laser printer firm ware 
development process and has decreased the number of indi- 
viduals needed to manage defect infonnation. DMS allows 
prcjject teams to manage all aspects of the defect process 
without the need for the iutei-v^ention of tie feet tracking 
experts or other outside agencies. 

hi tui unanticipated use. DMS bas aEowed us to share defects 
with tbird-party^ software vendors anil still maintain securit:y 
of mtenial defect uifonnation through die i>assive ser-v^er data 
exchange mechanism. We have successfully used this mec'ha- 
nism to import and I rack defects that originated from a pub- 
lic DMS database server that was accessible to tliird-pm^ty 
engineers. This capability^ has generated much interest from 
project teams that use DMS and have extensive interaction 
with third-paity soft waie vendors. 
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Realizing Productivity Gains with C++ 

Although C++ contains many features for supporting highly productive 
software deveiopment. some characteristics of this object-oriented 
programming language tend to slow the realization of these 
productivity gains. 

by Timothy C, O'Konski 



In jitany cases there is a long delay between starting to work 
in the ('++ Imiguageand realizing ilie poteniial pTtxlucthlt^' 
gains of rhe object-oriented paradigm, iiiehiding eotle reuse. 
Before this delay can be shortened or eliniinated eittirely, 
prattical issues relating Vo die niultiparadigm nature of C++ 
and its C ancestry musi be linderstood. 

The object-oriented benefits of data abstraction and inheri- 
tance conpled wilh t>pe checking give C++ a natural athan- 
tage when atterti]>tiii^ to l^uild bodi system and applicatioi; 
soltware. Additional producthlty gains can l>e obtained by 
reusmg a class lihraiy if the follow^ing considerations can 
l>e met: 

• Prograjimiing mechanisms confined witliin the class Uhraiy 
jnnst be imdei^tood by the pj^ograjnnier before they can be 
expanded and reused correct I y. 

• When s^ electing a ('++ librai>' chiss orchis?? template, the 
m7A\ perfonnance, and quality chrLia<1eds!ics of each class 
or class template component must l»e appareni lo the 
prcygrainnieiv 

• Apt^ropiiate class or class template defmidons must first 
be properly located by the programmer so they can he ia- 
c o tjK) r: ii vf\ i 1 1 1 ( ) t h e program r a nen t ly u nder den' ( 4o| a 1 1 en t. 

• The time taken by the programmer to leani how to use tbe 
libnyy coneetiy nmsl hv much less than the time necessary 
lor the programmer to crt^ale ra'w rode, Olherwise. the ^^ro- 
grammer might atteni})! I o rewrite the C++ Uhrary, mjiibilhig 
tin^ productivity gain. 

This paper describes onr experiences with developing new 
C+'h software and modiiying existing C++ libraiies. It also 
looks at possible uses of templates atid exception hiwidling 
defined in the new emerging ANSI C++ st<itttlatd X*1JKL 

Mixing Programming Paradigms 

Tbe followhig discussion describes some stiindard C++ 

programming paradigms luid I lieir associated problems. 

Concrete Data Types. Concrete data types are the ret>resenta- 
lion of new user-dellned data ty|>fs. These iiser-definefl data 
types .stip|>lemcnt the C++ huilt-in data types sucli as inte- 
gers and characters to provide new atomic huildiiig blocks 
for a C++ program. All the operations (i.e., inenil)er func- 
tions) essential for the snppoil of a user-defuied data type 
are provider I in I he concrete class definition. For example, 
tyijes such as complex, dale, and f*hara<*ter strings could all 
be concrete data tyiJes whi(*h fliy definition) cinild \w uHvd 
as building blocks to create objt^t^ls in the iLser's Hjij>iic ation* 



TFie following code shows portions of a concrete class 

called date, wiiirh js responsible for constructing the basic 
data structure for tJie object date. 

lypedeJ boolean int; 
#defme TRUE 1 

#define FALSE Q 

class date { 
public: 

date lint month, mt day. tnt year); //Constructor 

-dateO: //Destructor 

boolean set_daie(int month, iniday, imvaar); 

//Additional membeT functions coutd go here,,, 

private: 

intyear; 
intrirmerical date: 



// Additional data members could go here... 



}; 



Designers of concrete data types must ensm-e that users of 
this class will uai wan! \o add fimctionahty to tiie class 
through <ierivrLtiori. Odienvise, the chiss must be designed to 
handle incremental atklitions in arlvance. Failing to do so 
could caiLse an ill-deHned sel of functions (for example, a 
missing assignmeiH r>r ropy constnictor' } which in tuiTi 
wrnilt! cause a deter t lo be uneoveretl l>y unsuspecting users 
o I il u ' t 'o n c ri^ e ( I at^i I y [ y t\ 

Abstract Data Types» Abstract data types represent the inter- 
face to ntore tiian one implementation of a common, usually 
complicated concept. Because an abstract data type is a base 
r^lass tr^ nuae than one fieri viMJ class, it mu.st coiiUiin at least 
one pure virtual fnn<1iniL Objects of this lype can <jnly be 
created tbrtjugh derivalion in which tiie pure virtual function 
implementation is filled in by the derived classes. 

Tile following is an example of an ai>stract base class: 

class polygon { 
public: 

// constructor, destructor and other member functions 

// cDuJd go here... 

virtual void rotate (int i| = 0; //a pure virtual functton 

// other functions go here.., 
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Glossary 



Although the ferminology associated with objecl-oriemed pc Qgramrning m6 C+^ 
has become reasonably stanbardized. some ohiect-oijemed terms may be slightly 
different depending on the implementation Therefore, bnef definitions of some of 
tfie terniinolagv used in this paper are given below For more tnformalion on these 
terms see the references in the accompanying article 

Base Cfass. To reuse the member functions and member data struciores of an 
existing class. Z^ provrdes a technique called dass derivation in which a new 
class can derive the functions and data representation from an old class The old 
class IS referred to as a base class since \t is a foundation (or base] for other 
classes, and the new class is called a derived class. Equivalecit terminology refers 
to the base class as tt>e superclass and the derived class as the sui^cJass. 

Catcli Block* One lor more} catch statements follow a try block and provide 
except Jon-handling code to be eiisecuted when one [or more) exceptions are 
thrown Caught eKceptions can be rethrown via another throw statement within 
the caLch block 

Cfass. A class is a user-defined type that specifies tbe type and siiucture of the 

infomiation needed to create an object (or instance) of tbe class, 

Ccinstnietiir$. A constructor creates an object, performing initializatJon on both 
staclc-based and free-storage allocated objects. Constructors can be overloaded. 
but they cannot be virtual or stairc. C-h- constructors cannot specify a return type, 
not even void, 

Derived Class. A class that is derived from one [or more] base classes. 

Destructors, A destructor effectively turns an objact back into raw memory. A 
destructor takes no arguments, and m return type can b€ specified (not even 
void). However, destructors can bevirtuai 

Exception Handling. Exception handling, which ts a feature defined in the ANSI 
X3Jf 6 Draft and implemented in HPs 3.0 C-h- compiler, provides language support 
forsyrichronous event handling. ThfS feature is not the same as e?^is1ing asynchro- 
nous mechanisnns such as signals which are supported by the underlying environ- 
ment Tbe C-i-h exception handling mechanism is supported Ly the throw statement, 
rry hlocks, and catch blocks 



Member Functions. Member functions are associated with a specific object of a 
class That IS. they operate on the data members of an object. Member functions 
are always declared wJtbm a class declaration. Member functions are sometimes 
referred Id as methods 

Multiple Inheritance. A derived dass can be derfved directly from one or more 
base classes. Any member function ambiguities are resolved at compile time. 

Object Objects are created from a particular class definition and many objects 
can be associated with a particular class. The objects associated with a class are 
sometimes called instances of the class Each object is an independent object 
with its own data and state. However, an object has the same data structure (but 
eacfi object has its own copy of the data! and shares the same member functions 
as all other objects of ihe same class and exhibits similar behavior For example, 
all the objects of a class that draws circles will draw circles when requested to do 
so, but because of differences in the data in each objects data structures, the 
circles may be drawn in differeni siies, colors, and locations depending on the 
state of ttte data members for that particular object 

Template^ A class template provides a mechanism for indicalrng those types tbat 
need tu uhanye with each class instancE. The gener<c algorithm associated wjth 
the class remains invariant Later in the. class instantiation, these types are bound 
to built-m or user-defined types. 

Throw Statement. A throv^^ statement is part nf the C-I-+ exception handling mech- 
anism. A throw statement transfers control from the point of the program anomaly 
TO an exception handler The exception handler catches the exception A throw 
statement takes place from withtn a try block, or from a function in the try block. 

Try Block. A try block defines a section of code in which an exception may be 
thrown. A try block is always followed one or more catch statements. Exceptions 
may also be thrown by functions called within the try block, 

Virtual Functions. A virtual function er>ables the programmer to declare member 
functions m a base class that can be redefmed by each derived class. Virtual 
functions provide dynamic |i,e., run-timej binding depending on the type of object. 



Other clusscs, siicfi as square, triangle, and trapezoid, can be 
derived from polygon, and the rotate function can be tilled 
in and defined hx any of these derived classes. Note that 
polygon objects t ainiot be consinicteil. The C++ compiler 
will prevent this from happt^iiing be* ause I here is at le^i^st 
one pure virtual member function tiot yet dennei]. 

Abstract data t>7Jes sornelinies sid'fer from loo many func- 
tions being declaied \irtual. This adds both size and some 
slight overhead to the program's speed of execution- Inlining 
wHl usually eompetisate for the speed overhead incurred by 
a virlUiU luiu^tJon, but will add even more to the size of tlie 
program or library object file. 

Node Classes. Node classes are %iewed as a foundation 
L'ktss cuiupojteiit upon which derived classes cati be biiilt. 
Designed to be pan of a hierarchy, a node class rehes on 
services from other base classes iuui [>rovidGS some imique 
sendees itseif. A node class defines any virtual functions 
necessai>' to chiuige tlie object's behavior or fill in any pure 
\drtual function definitions stiU left ujidefined hi Ihe deilved 
class. Additional functions are also adcied by a node class to 
widen the behavior of an objetl. Node t lasses^ by tbeir very 
naiute, will rtot sid'fer the fate of misconstrued concrete 
data t>pes <leseribed above, but may suffer from some 
p rogr an u t u ng e rrors. 



Common problems in declaiing node classes stem from the 
fact diat they are designed to be sources of object deriva- 
tion. Because of this, the presence of any virtual fmictions 
(iu either the base or any derived classes of the node class) 
will require tlu^ presence ofaviilual deslntclor to ensure 
proper class cleanup, Becatise ojie earn lot determine if atid 
when a virtual function might be atlded by a class deriva- 
tion, it is belter to be sale and fleclare the destructor \irtual 
in the base riass. Tbis is because the ''\irtualness'' of the 
destrtictor cannot be added in any derived class. It must be 
|nirl of the base class destructor declaration. 

Ai^ additional j>robieni rtHUruon to a node class is improper 
verincation of pifjtected data members. Because a derived 
class can modify or change protected data niembet^, they 
could he invalidated by any derived class. Adding assert 
statements to a special ''debug" version of the node class 
that validates the protected data can detect this type of 
progm M 1 rn i ng e rror 

Interface Classes. Interface classes are the most humble but 
important and overlooked of all classes* The purest form of 
an uiterface class doesn't cause any code to l>e generated. 
Consider the fVsUow ing unsafe class called List, w liich is 
wrapped by tiie class template Satelist: 
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tempiate<class T> 

ctass SafeUst : private List<vOT(J*> { 

public: 

void tnsertfT* p) {Ust<vGid*>:;msert(p}; } 

void append(T' p) { UEt<void'>::3ppend|pl; } 

T* getO i relum (T*^ ljsi<void*>r.git(h } 
I 

Here, a class template called SsfeUst is used to convert an 

yjxsafe generic list of vofd* pointers into a more useful family 
of t^pe-safe list classes.- T^P^-safe means that the compiler 
checks for correct pointer types instead of allowing any 
pointer (e.g., void*) to be used mthin a list template. The 
ver>^ nature of a void* pointer is that it n^ay contain a pointer 
to any object. By adding dte Safe List template* we are ensur- 
ing that a Lisi template can only contain poititers to classes 
that we have defined for use with a List template. 

Interface classes are used to actjust an interface, provide 
robustness with a greater degree of type safety, or prevent 
member function names from two different class hierarchies 
from clashing. 

Handle Classes. HatuUe classes provide an effective ^paiation 
bet \\ eeti mi object interlace and its implementation. Handle 
classes provide a level of uidirection via pointers. Additional 
benefits include an Interface to mcrnor^^ management and 
the abihty ro rehind iterators for a class representation. An 
iterator is a ftmction thai returns the next elcnien! in a list, 
jirray, string, or any eollecf ion of items each time it is called. 

A handle class is a good candidate for a class template: 

template <class T> class handle_cl3ss { 

P representation; 
public: 

T* operator->{| { return representation;} 

); 

This code fragment shows how a handle class is tised to 
man i pit late pointers to objects of type T, instead of actual 
user-defmed class representations of objects of tyj^e T. A 
liiTiblem with handle classes is that thi\y require coo|>erati on 
between llie t lass being liandlcd aitti the hatidle class itseh\ 

C Roots 

The fact tliai C++ is based on ilu* V progratuming language 
us evident I hroughotit the taj;guage. (• is retainetl as almost a 
subset of C++ and so is the emphasis on C facilities thai are 
low-level enough to deal \^ith the most dem ant ling system 
progranuuing tasks. 

Once a class dell nil ion has been agreed tipt>n by a program- 
ming team, the prognunmers have the abihty to proceed witii 
implementation by iisitig member fimction code stubs when- 
ever necessaty. This practice of filiuig in stubs with real ftmc- 
tion code when necessary in coixjtmction with C++ "s static 
type checMitg enables a fnnn of rapici prtjtotyijing \ia mt re- 
mental development,"^ C++ allows iterative design and im- 
plementation to proceed in tiarEtllel, facilitating a more rigor- 
ous design methodology- than conventional C programming.^ 

Because of the C roots of C++, most or all of tlie low-level 
t>rograjtiming tasks tliat are within the raJige of C are still 
vviiiiin the scope of C++. However, some of the problenis that 
1 1 a ve p I ag II tH i C t in >gninui le rs also eflVHM C++ p rograt n n lem. 



The problems encountered in this regard include: imuiitial- 
ized pointers, data narrowing, memory leaks, and conflicting 
*de fines, type dels, and eniims, 

Uninitialtzetl Pointers, .^n tminitialized pointer might contain 
a garbage address, and if used in its uninitialized state may 
cause the program to abort, 

m *pmt 

// other code i*pmx is noE initialized to any addressl 

*pint = 9; // may result rn a "Bys errortcoredympr 

Data Narrowing. On a system where sizeofistiort^ is two, the 
code; 

unsigned short s - 65S35; 
signed int i - s; 

will silently chattge the ^alue of s to be -1 when i is printed. 
This is because in the unsigned version, the higli bit is tised to 
increase the value of the unsfgned short, while ui the signed 
fi.e., inti) version, the sigti bit is used to signify a negative 
number. WTien the unsigned 1 vahie s is assigned to the signed 
int value i, the number changes from a laige unsigned valtie to 
a small negative value because its higit-order bit is interpreted 
in a different manner 

Memory Leaks. V\Tten a location that contaitis a pointer to 
memory is deallocated, a "menior>'' leak" occurs (jnsi as in 
C). Tltis means that the location thai contained the poittter 
to memory allocated out of free storage is no longer valid. 
Til us, the Jtllocated mcmoi^' cannot be accessed for tlte 
duration of the program. For example, in the sequence: 



( 



char *s = new char! 10]; 

//some code hare.,, 
} 
// the variable s is no longer accesstble 

the pointer s is out of scope and a memory leak will occur 
immediately after diis code segment if a delete s operation is 
not perl'orntcd before the end of this code fragment, 

#defir(ES, typedets, and enums. Problems with these declarations 
occur on a per-program basis when declared ai Ilip scoping. 
For example, 

//header fife #1: 

typsdef int boolean; 

//... 

<eDf> 
and then: 

// header file #2: 

typedef unsigned hooiean; 

<eof> 

will cause the linker to isstie an error jmd aboit because of 
confticting typedef declarations in two different source files. 

lypU-al Problems with Libraries 

The ANSI C++ C\>nmiittee X3J10 and a parallel ISO flntema- 
tional Standards Organization) conmiiftee are cnnently 
standardizing I lie ( ++ languagt\ (hn^T the past six years the 
C++ langnage has t^mlinued to (^volv(^ IhrrMigh five m^^jor 
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releases. This moving t^get has resulled in libraries and 
programs thai typic^tilly have upgrades Ihat atcornniodat.c 
the new laiigiiage features without taking full acivanUge of 
Uiem.'' Tills nieajws that the pro^rartimer trnist make deft- 
sions regarding wJiich feature is tlie eurreet one to use with 
each new release of a class library. 

Requiring C^+ library users to be conversani with fxjih the 
previous and current C++ versions is a hardshiji on die C++ 
progranmier. As a result some progrannnerf) have c completely 
avoided new versions of C++ mid stayed with the C++ release 
upon which their produtt is based. This problem will sub- 
side significaiitiy vvhen the X^jUIO committee work becomes 
sohdificd into a draft standard. 

The txaditional object-on en ted approach of using class deri- 
vation (i,e,, inheritance) to reuse existing functionality is not 
necessarily tJie best way to make use of C++ classics to pn> 
\ide ah/vi-u relatitjiisliij) as ojjixjsed to tiie traditional inl\er- 
itaiice use to provide an is-u reliitionsliijj. Is-a relationships 
are provided for by C++ via inlierilance, wiiicli is conunonly 
known as a class derivation. P'or example, if class B is 
derived IVom class A, B has idl tiie cliai*acteristics of A plus 
some of its own^ and we caji siifely say t liat B is-a kind of A. 
Has-a relationships are supported by composition rather 
tiiatt by inheritaiice, Couiposition is implemented l>y making 
one class a member of another class. -^ For example, we have 
a has-a relationship if B is contained in A, 

It is still not, cleai' whether to use multiple inlieritance to 
combine the features of two different class libraries (i.e., 
bolh via is-a relationships) into a new class. One school of 
thought argues that multiple inheritance gives the class de- 
signer much more tlexil>ility than single-inheriUmce class 
relationships/*'^'^ 

Classes that Lncoiporatc the new exception htmdling mecha- 
nism (described bek>w ) and also reside in nmitiple libraries 
do not yel exist on the marketplace. Therefore, conclusive 
evidence regarding the utility of mtiltiple inheriliince as a 
language featiue to be used when combining classes from 
multiple libraries cannot be constructed until such C++ 
libraries exist and aix- successfully reused. 

Templates 

Templates provide a type-safe way of creating what is essen- 
tially a macro-like textual substitution mechanism and maniji- 
ulating different types in a generic: fasliion. Templates provide 
a way to define tiiose tyi>es that need to change widi each 
class instance. Templates are created Ijy pmameterizing 
types in a class definition. These i^aranieters act as place- 
holders imtil they are bound to actual types such as int, 
double, short, and char. For example, ui the following code 
fragtuentf which is a template for an array class, Alpha num is 
the parameterized type. 

const mt arravsi2e = 16; 
template <c!ass AiphanuTn> 
class array{ 
pubiic: 
a rra v( ) n t S2=a rra ys i ze \ 



isize=sz: indx=new Alphanum IsEzel; } 
virtual -arrayO {delete rndx. } 

private: 
int size; 

Alphanum ''indx. 



//. 



1: 



Wien this template Ls used, objects of the array clasg might 
look like: 

main 

{ 

array <int> fntx (2); //integer objects.., 

array <double> doublex (2); // double objects. . , 

array <char> charx (2h // character objects... 



} 



Tliis shows that the actual type is subslitut-ed for tlie generic 
Alphanum defined in tiie template. 

Using template classes creates a need fur specific configura' 
tion management and tool support.^^ Additionally, template 
syntax is comphcated and makes the code more diftH.'ult for 
others to imderstand, Tool support is needed lo help cover 
the lemplate syntax issues and for manipulating the interac- 
tions betw^een tetnplates, classes, and exceptions. 

Exceptions 

An exception is an event that occurs during prognmi execu- 
tion Uiat the prognun is tyijically not prepare 1 1 to handle. Tliis 
event usually results in die program tnmsrernng control to 
another part orttie program (extieiition hm^dler) that can 
handle the eveiiL Bxceptioii handling Is necess^uy for robust, 
reusable lil>iaj'ies. Since exceijtious may cause resources to 
be released in an unexpected maimer, acquisition of re- 
sources and appropriate cleEmup is a new requirement oit 
class libraiies. Tlie topical mechtuusm of acfjuisition imd re- 
lease oF files can easily l>e handleti l>y using object construc- 
tors tmd destnictors as shown in die following example. 

class FilePtr{ 
Fl LE* p; // declare pointer to a f ile , . . 

pubfic: 
FNePirl const char* n, const char* a] //class constructor 
{ p -fopentn, aj;} 



FiJePtr{RLE*pp){p = pp;} 
-FilePtrOlfclosejpl;} 

operator FILE* [ return p; } 



// class destructor closes file. 



}; 



Mth this object class» a file pointer p can be constructed 
witli either a File* or the argimients requirefl for an f openl). In 
eidier case RIePtr wiU be destroyed at the end of its scope 
and the destructor will close the file. A simple example of 
this programndng technique wouki look like: 

void usejilejconstchar' name) 



{ 



FilePtrf(name: "r"); 
//usef... 
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The destructor will he called regardless of whether the 
function is exited normally or an exception occurs, 

Otlier C++ language issues that need to be considered when 
reusing C++ libraries thai incorporate exceptions include: 

• Converting existing libraries to handle exceptions properly 

• Remapping unexpectedO and terminateO functions 

• Combining the exceptions of one library with those of 
another [ibmr>^ in a single progmm 

• Handling asynchronous events (e.g., signals) and 
spichronous C++ exceptions simultaneously 

The following example program shows how multiple tlireads 
of control, wluch are represented by HP-UX* asjTiclironous 
signals and synchronous C++ exceptions, do not work to- 
gether simultaneously Tlie second throw statement (re- 
throw) in the myhandler portion of the code, wliich tries to 
transfer cojitrol outside die exception handler, will not work 
at tills time. The compiler cannot detect this condition be- 
caiLse of the possibility of separate compilation of the signal- 
handler code and the code that traps to the signal handler 

^include <unistd.h> 

#inclLide <stream.h> 
^include <signaLh> 

r 

* types needed below (used to he in <sEgnaLh>, but were removed in 

* HP-UX 8.0) 

* I^Jote: This program (and the other code in this smclel was compifed on an 

* HP 9000 Model 730 running HP-UX A,08.07 using HP C++ A.03.00 
*/ 

typedef void SIG_FUNC_TYP{im); /* for UNIX* System V compatibiltty V 
typedef SIG JUNC..TYP *SiQ^TYP; 
#define SIG_PF SIG.TYP 

int i ^ 0; 

/* The lonction myhandler is called when the SIGINT is detecled by the 

* program; after which a "sleep" and then a "throw" fs perfDnned (i.e., in 

* a synchronous manner}. PLEASE NOTE: This signal handler could reside 

* in a separate compilation unit, making it impossible for a compiler to 

* check for this error condition. 
V 

void myhandlerO 
{ 
try{ 
(void) signal fSIGfNT, (SiG_PFI myhandler); 
cout « "in myhandler now.. An" « flush; 
sleep{1}; 

thrDW i; // error: NO throws aHowed in signal handlers if they 
// are not caught in the signal handler 
} 

catch (int i) { 

cou!« ''catch inside myhandler now...\n''« flush: 
throw; //this is an error because rethrows (or throws} 

// are not allowed to propagate outside a signal handler 
} 

1 

/* This main program waits for a SIG_PF, (i.e., usually CTRL/Cj 

* which causes a core dump because ot the throw propagation restriction 

* mentioned above, This mixture of asynchronous signals and the 

* synchronous exception handling causes C+ 1 to exhibit a rootine failure. 



* Therefore, this construct should be avoided. 
7 

int mam () 
{ 

cout « "starting tlie proQram..\n* « flush; 

// Arm our signal handler. . . 

fvtjidl signal (SlfilNT, (Sie.PF) myhandlerj; 

//forEVEHIoap-.. 

tort;;) 

( 

try {// Now that we are in a try block, let's throw something... 
throw i; 

} 

catch (int i) 

{// Now we're m the catch block, so let us notify the user and 
//sleep for a moment,,. 

eout« "in main catch now. .An'' « flush; 
sleepO); 

] 



} 

//we'll never get here, hut lor completeness.,, 
return 0: 



} 



Conclusion 

C++ is an effective language for promoting both incremental 
development and code reuse. The addiliouat capabilities of 
tempi ales aj\d exceptions need to have more klioniy lonnaJ- 
ized for tJieir proper use. Because of CV-h s increasing coni- 
ple)dty, stiTjnger environmental support is critical for tiie 
continuation of the language's success. 
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Bridging the Gap between Structured 
Analysis and Structured Design for 
Real-Time Systems 

A real-time software design technique has been applied to the design of 
the software architecture for ultrasound imaging products. 

by Joseph M. Luszcz and Daniel G. Maier 



SLruclurcd analysis (SA) and stnictm-ed design (SD) are 
two widely used nietht^dologies for software development. ^^^ 
Structured analysis specifies the functionality to be imple- 
mented by a softwaie system, and structured design is used 
for pailitioning a single task into a set of functional modules. 
See ** Structured Analysis and Structured Design Refresber"* 
on page 92 for a brief re\iew of ttie structured analysis and 
structured design notation and temiinology used in this 
papen 

Wben designing and implementing a software system repre- 
sented by a structured analysis model, it is usually necessary 
to partition the functionality among a number of concunent 
tasks to meet the timing constraints placed on tbe softwaie 
system. In addition, to achieve a design with tht^ cluiracteris- 
tics of low coupling and liigh cohesion, it is desii'able to 
paititioii the funelionality into objects or packages for data 
hiding. 

Although stnictured techniques provide designers with a 
metliodology for paititioning a complex system into manage- 
able pieces for analysis and design, there are some problems 
in makmg the traiisfontiation from SA to SD for i eal-linie 
systems design. For example ^ the transfonnation from SA to 
BD does not easily support roneurrency. Processes need to 
be grouped into concurrent tasks before detailed design. 
Another example is related to object-oriented design. SA 
and SD do not strongly support producing well-encapsulated 
objects. 

Because of these problems a software developer, after 
specifying a real-time system tising SA techniques, is often 
not sure liow to proceed to a design and tyi^ically resorts to 
ad hoc design techniques. A methodology is needed to help 
the designer bridge the gap between SA and SD. 

The ADARTS Solution 

AD ARTS [Ada-based Design Approach to Real-Tlnie Sys- 
tems)^ is a high-level design methodolog>^ that effectively 
fills the gap betw^een SA and SD by pro\idhig a systematic 
means (called process steps) tor partitioning ai^ SA specifi- 
cation model into a set of Itisks, packages (objects), aiid 
coimiiunication hiiks, which can tiien be designed using SD, 

■ Although ADAHTS uses Ada ccin&tructs, its use ts not lirrnted to Ada, ADARTS was creatad bv 
a gfoup of campaiiies called the Sohware ProtlucTiVJtv Consortium fSPCl. Iwq versions of ftie 
AOARTS specpficatffln have been produced by !he consortium. This paper is based on Xh& I'lrst 
VEfSJon ^ 



The deliverables from ADxAIiTS inchide a set t)f liigh-level 
architectural diagrams and a set of specifications called 
component interface specifications for each task aJifl pack- 
age. These dehverables are described later in this article. 
Pig. 1 shows a simple oveniew of how ADARTS fits into the 
softw^are develop men I process with SA and SI). The nota- 
tion imd graphic symbols for tlie ADARTS diagram sho\\ii ki 
P'ig. 1 are described in more detail later in this paper. 

We have been using ADAKTS for erTibedded sofi ware devel- 
opment at Imaging Systems Division ([SV) sin<^e esiriy 1990. 
j^DAETS helped us deal with the complexity inherent in tiie 
desif^n of the ISV shared soft waie aiThitectiue. and we found 
it indispensabk" in [urning SA nuxiels into realizable designs. 

Wlule the AD ARTS technique supports the synchronizing 
constructs inlierent to the Ada programming language, it is 
not necessary to program in Ada to derive the ni^ority of 
the benefits from ADARTS. We easily adapted the methodol- 
ogy and its diagraituiiing tenmnolog>' to a more conventional 
operating environment consisting of high-level language 
programs running under the control of a real-time operatmg 
system. At ISY, we develop software in the C language nm- 
nmg onder tlie pSOS-68K operating system* However, our 
approach to using .ADARTS works with imy language. 

The diagramming notation used in ADARTS is based on the 
Ruhr notation, ^ which is used to represent the tasks, pack- 
ages, ai^d conmiunication paths resulting from Ihe design 
decisions made in ADARTS (see Fig, 2 ), This diagraninTJng 
notation is snpported in commercially available CASE tools. 

The rest of this paper gives a brief o venae w of the ADARTS 
methodology (defining the notation shown m Fig, 2 along 
the way) and then presents an example of our experience 
with using ADARTS for software architecture design. 

ADARTS Process Steps 

Tl\e ADAHTS process in\ olves following the steps listed 
below to create the ADARTS deliverables mentioned above 
arid then using the dehverables to design and implement the 
system. 

L Develc>i3 a real-time structured analysis siiecification, and 
level the data flow diagrams to create a single (flat) diagram 
from the liierarchical set of data flow diagrams m tbe origuial 
model. 
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Fig. 1. 'I'he rolf of ADARTS in the software developineiit pr^^cess. 

2. Fdentify conciuTent tasks by applying task structuiing 
critt^ria, m\d (iet<'nniiio the kinfl of conunimication aiid syn- 
chronization nttMluniisnis for Llie da I a and events passeii 
between tasks. Task structuring involves combining those 
processes that shoukl be combined or keeping separate 
those processes that must be separate, 

3. Identify packages (objects) by applying the package 
stnicfuring criteria to produc:e welRmcapsulated softwaic 
objects. 

4* Add support tasks to provide required syiicluronization 
and message btiffering services. An example of a support 
task is a task that synchronizes access to a data store tlia! 
is accessed by nuihiple tasks, 

5. Package the tasks (we skipped this Ada-specific 
requirement). 



6. Develop an NRL (Naval Research Laboratory method) 
module hierarchy (we skipped this step). 

7. Defhie component interface sj^ecifications. 

8. Perfonn the detaileti design of task and package internals 
using structured design or an aJtomative mctliodology. 

d. Implement (code) the tasks and packages. 

10, Store the completed components and design 
documentation in a (reuse) libratry. 

Note t fial (he ADAHTS process stejjs ate all-inchisive, cover- 
ing ttie development of the software system from conception 
to delivery. Steps 2 through 7 ai^e the contributions of 
ADARTS that are above and beyond SA and SD. 
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Fig* 2. Ai>ARTS iiot^tiorL 
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Structured Analysis and Structured Design Refresher 



Structured ana(ysfs and struciured design concepts liave been m use for several 

years now, and thus the concepts, termiiofogy, and graphic symbols are fairly well 
known The fallowing are some very bfief definaions of the SA and SD graphics 
symbols shown in Bgs 1 and 2 and used m Ihe accompanying article. Fig, 3 shows 
the process flow from customer requiremerits to code when SA and SO are used 
in software development References 1 and Z in the accompanying article contain 
much more information about SA and SD techniques. 

Structured Analysis Notation 

So uciured analysis notation and methadologv provide: 

• A graphic and concise representation of software functionafity 

* A technique for partitioning a problem into manageable pieces 

* A way to represent software lunctionaJity in a nonredundant fashion 

• A way to create a logical model of what the software system does rather than 
how to do it 
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The following definitions are associated with the notation in Ftg. 1 , 

Data Flow Diagram. A data flow diagram is b network or related functions or 
processes and the cof responding data interfaces between these components. The 
notations shown m Fig. ) that are user! Todepfti a data how diagram consist of 

• LabeJed an'ows, which show the data flows finformation flow) between processes 

• Circles [or hubtiles). which represent the processes or transformations hemg 
mode ted by the system 

• Two parallel lines, which represeni data stores, or places where information can 
stored 

• Rectangles, which represent the data sources and destinaiior\s {sinks) in the system, 
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Account 
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Fig. 1. The e^ssaniial eternents of sinjcturad analysis notaiion usirtg bani transactions as an 

eitampfe. 
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Rg* 2. A sTructure cligri ^QWiftg tftfe teserttiai elei*«hts W Wuctiir^ aes^ti not&tfoli fcr tre 
bank example. 



Iksk Structuring Criteria 

Task stnicturmg criteiia aie niles that guide the designer in 
combining SA process trarLsfonnations (process bubbles or 
p Specs) ami control transfomiations to fonn coticrnTcnt 
tasks, whiie separating those translbn nations that need 1o 
be separate inlr> indct>endent tasks. These <.Titeria reflect 
the sanie reasoriiiig that an experienced real-time system 
designer might use when deciding on a c oncurrent task 
stnii^ture. ADAIiTS r )rganizes these criteiia for systematic 
apphcatlon to software design. 

The foUoA^'ing are ADARTS task st met tiring criteria for 
combining transfonnaiions to create concuiTeiU tasks: 



• Sequential cohesjon. Combine trajisformations that execute 
in sequence with other transformations, such as a state ma- 
chine and the processmg that occurs on a state transition 
(see Fig. *3l, 

• Temi>oral C"ohesit.)n, Combine transfonnatioit-s that must run 
at tlic same lime as oilier transformations, sue h jis trans- 
formations that must respond to the same event (mternipt) 
or the same time lick. Fig. I shows tlie transformations that 
take place when a sensor nioniroring patient tejiipcrature 
senses an out-of-limits temperature. 

• Functional cohesion, ("ombine tnittsfortnations tJiat perfonn 
one or more related fimctioas. These f mictions typiccUly 
operate on the same data structnre or simte I/O device. For 
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Cuntext Diagram. This is ihe iDp- level rfiagram wliich shows Ehe environ mem in 
whtch the software sysiem being despgned is supposed to work. The context 
diagram consists of one circlE and the sources and sinks in ttie system's operating 
environment. This diagram forms the basis from which the rest of the sysrem is 
designed. One or more levels of data flow diagrams can be derived from tjie can- 
text diagram, Multiple levels are created by partitioning ttie processBS rn the data 
flow diagrams, 

Data Dictionary. The data dictionary is used to define all data flows and compo- 
nents of data flows and data ^ores It provides a single place to record information 
that Fs necessary to understand the data in the da la flow diagram, 

Process Specifications. When a process can no longer be partitioned, tfie 
resulting processes are called pnmilive processes. Process specifications, or 
pSpecs. are used to describe ttiese primitive pnjcesses, The notations commonly 
used in pSpoes include structured English, decfsion trees, and decision tables. 

A data dictionary arwl process specfficatiorrs ara symbolically represented in Frg, 3, 




Mrn ispec if i cations 



Detailed Design Model 
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Ftg. 3. The rple qf structured analvsis and siruciured design in the safr^.\'3re devaloprnent process. 



Structured Design 

Structured design is the process of refming the output from the structured analysis 
phase to design the module structure that will lead to a particular implemeniaiion 
of the software system The steps in the process include: 

• Derive a representatson ot the program structure with a structure chart. While the 
struciure chart can be created from any system spectfication. it is typically created 
from a flattened data flow diagram The structure chart consists of three basic 
features: boxes representing modules, arrows connectmg the modules, and short 
arrows with circular tails representing data passed from one module to another 
(see Fig, 2\. 

• E>spand the bigh-level definition by identifying lower-level modules needed to 
carry out the higher-level funclions, 

• Improve the representation by employing the design principles of cohesion and 
coupling, Coupling measures the degree to wbich modules depend on each olher. 
and cohesion measures tfie degree to which elements within a single module are 
related to each other. 

• Complete the detailed modufe design by employino a procedural logic description 
such as a minrspecification (mSpec). An mSpec js simflar to a pSpec for processes 
in structure analysis, except this time each module rs being documented, 



exaniplp, a process that computes txlp stalistics contains 
functions tliat access a database of collected trip data and 
then compiJie the requhed statistics (see Fig, 5). 

The criteria for separating transformations into Independent 
tasks include: 
• Event dependency. Use a separate task for each transforma- 
tion or group of^ transfon nations dependent on: 
a De\iee I/O constraints stich as respontiitig to asynchronous 

I/O requests 
o I'ser inteiface {'oristraijU.s such its itidependent users or 

user interface sequent iai activities such as windows 
o Periodic events (eventii tliat itiitiate transformations at 

regular time hii rivals). 



• Control Transformation. Use a separate task for each 
independent control transformation such as a state machine 
controller or a transformation that is enabled and disabled 
by aconlrol transformation. 

• Task Priority, Use separate tasks for time-critical or 
compu tat i on-intensive ac t i\1 ties . 

• Multiproeessmg. L'se separate tasks for transfonnations 
that must execute on separate physical processors. 

ADAKTS specifies the order in which task structuring criteria 
should iw applied so thai the first criterion assigned to a 
trans form ati on is usuaiiy the predominant one. However^ 
subsequent criteria may contradict the original ciassifica- 
tioiij and when that happens the original decision should be 
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Fig* 3* All rxcitnpliMvrswiuenrial t'i>h(*.sion in whirJi twti irjittsfnnnn- 
Uons Ihat occur in soqiu*iir't> arc? t^nmhmpd into one- tank, 

reconsidered using good engineering jud|*nient to decide 
whicli criterion is doitunaitl. 

Intertask Catntnimicatian and Synchronization 

Once the task structure has been defined, the clata iuid evetit 
interfaces between tasks must iDe deteniiiiied. The ADARTS 
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Fig- 4, An example of teniporai cohesbti iti which ttiree processes 
activated b^^ the same event are itjiribineri into a stn|?Io task. 



Fig. 5. .\ii exiiiiiple ol iLuiciioiiai ci>he.sirjii Ui which two Lrarisrottiia- 
lit JUS perfomiiitg fiinetians related to trip data are fjornbiiied into a 
single task, 

process provides guidelines for choosing how each data and 
event flow will be |iassed tjetween tasks: 

• Tightly CDtifjled coniinutiicatioji, Tliistype cjf conmituiicatioti 
involves sending messages or events iind then \\ aiting for a 
response. A model of tightly coupled communication is 
shown in Fig. 63. 

• Loosely coupled coinmunicatioii. This ]y\K' of comniunica- 
lion is implemented by a ntessage or even I qtieue with no 
response. In the pitHluc*er-<*onsumer model, the prochieer 
would eonlinue to senci messages it) a qtieue with<.njt waiting 
for a response from tlte consumer, which extracts messages 
from the qtieneal its owji pace (see Fig. (ib). 

• L^ios ely coupled conimiinicalion with multiple producers. 
This communication style is itnpleinented by a FIFO buffer 
or a priority queue. This is llie case in which nuuiy produc- 
ers might tiy to comnmi\icate with o]ie ronsujiu^r at the 
same time (see Fig. 6c). 

F.ach cornmnnif ation or .^synchronization flow Is represented 
in AJ)AHTS ardiiiet lure diagrams l>y a distinguishing synHaol, 
and each tyfje of How Ls implemented by a spec i lie meeha- 
nisni within the iim-time environment of the sy.steni being 
designed. 

Package Structuring Criteria 

The package structuring criteria are rules for creating pack- 
ages, or objects. The application of these crileriii produces 
well-encapsulated software ol)jet ts using the cortcepi of 
iiiformati<*n liiding. The ADAF^TS i^ackage stnicluring pro- 
cess does not contain many original ideas, but retnesents a 
compilaUoTi of existmg ideas aiui strategies apiJlted to a new 
domain (real-time systenis). Tliese niles fall into one of the 
following categories; 
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Fig. 6* ADARTS dkigrcUiiht modeling in t.^rtask cumjiimiicaLioii aiid 
sync^hrnnizatinn. (a) Hlgfitly tjoupled coiimitiiiication. fb) Loos'^ly 
coupled ronimimicat.kiiL (v.) IjCKJsely eoupled t;orniiinnieatif>n with 
nujlUpie producens. 

• Hardware hiding modules. These iDOcliiles are used lo en- 
capsulate paits of the virtual machine suc:h as the operathig 
system or conuiiuni rat ions mechanisms or interfaces (e.g,^ 
device drivers) to paiticulai' I/O tlevlces (see Ftg. 7). 

• Data abstraction packages. Bacli stmctured analysis dala 
store becomes the basis for a data aljst.raciion i)ai:kagt', 
which hides system behavior requirements or software 
design decisions associated i^ith dafa (see Fig, 8). 

• SGr%^ers. Seivers are passive modules tJiat provide services 
for 4) titer tasks. Piles servers and print servers are examples 
of tJiese types of mod tiles. 

Component Interface Specifications 

C*onijit)iu^nl imerfacc specificadoiLs (( IS) are textual de- 
scriptions of each AD ARTS task and package containing 
information that is tieedcd t,o iiis|)ect the high-Jevel tlesij*n 
and move to the detailed design mid implementation ol' that 
com[K3nerii. Kacli component intetface sijecitlratiun cunlaiiis 
tl\e name mid type of tJie component, wliat. the component, 
doe^ and when it does it, the operations provided by (he com- 
ponent (incltiding individual access procef lures or functions 
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NAIUIE' Scai!ninQ_siale_objtct 

DESCRIPTION: 

Th^ sDanfiing_stQte_(ibjeci tak^is a state stimulus as En put and pffl duces Ihe 
new st^anning state (ar an ermr codet as oulput (in the fonn of the scanning- 
state events). The object al^o has t)te ability to go explicitly to a panicutar 
state- 
Errors will be ex pi re illy listed in the state tables. This will maltB the slate 
tables a betler reffecrion of system o^ierattfii^. 

A £cnpl win be written to cam|iile d a seri prions of the scanning-state tables 
mto ROM data tables. The scanning -state tables for various system configu- 
ratians shoufd aJI be explicitly present in the soufca files, then compiled by 
the script to produce the C source for the stale tables. 

DATA STORES: 

Scanning -state trail sit mn table. 

Imtial scanning stale ~ tor use at power en/reset. 

DPERATIONSr 

Scn5t_iTiitiatJ2er) 

This entry point should be called at power-on/reset to set up the state 
Iransitian table and initialize scanning state variables. 
Scnst_ ^hg_stBt9 4 &ii mulii-s f 

"Siitnulifs" is one o1 an enumeration of possible stimuli. This entry point 
chaoses a new scan state based on the stimulus or produces an error 
code ff the stimulus is not allowed in the current scan state. If the scan 
state is changed tbe new scan state is output as an evenl 
Scn5:t_gola_5tal& islatel 

"State" is one of the possibEe scanning states. 
Tbis is meant In be used by internal applications, ft causes the scan- 
ning state to be changed ta the indicated state. 

Fig. 9, An example of a cortiponent interface specification. 

with parameter definitions), and the effects of the compo- 
nent's operations. Fig, 9 shows an example of a component 
interface specification. 

Experience with ADAETS 

Architecture Design 

We used ADARTS in liie design of a software architecture 
for new ultrasound imaging products. This project was di- 
vided into two parts. The fu^t part dealt with the develop- 
ment of the system softwaie that provides a framework for 
apphcation development and all generic services required in 
the application domain. The second part of the project dealt 
with the development of the software apphcations that pro- 
vide the specific function ality required by a target system. 
Each of these two parts of the project used SA and 
ADARTS, but in slightly different ways. 

First, the architectural structure and system components 
were developed. Tlie high-level fimctions of the architecture 
were specified using structured analysis. This specification 
treated iitU fimctionahtj^ in tenns of the general processing 
flow required for any apphcation, without defming the spe- 
cifics of any particular application. Tlie specification model 
was validated by walking through test cases derived from a 
number of representative applications. 

After the SA specification was complete, the ADARTS 
technique was applied to design the task and package struc- 
ture antl identify the coimuuni cation mechanisms to be 
used. Component ititerface specifications were created, de- 
taihng tite u^terfaces aj\d ftmctionaIit>' of each system eotn- 
ponent, followed by the detailed desigii and iniplemetitation 
of each componetu. Fig, 10 illustrates a key pait of the 
ADARTS process, in which fimctionaiit>' is grouped mto 
coherent, tasks ai\d packages using the appropriate structur- 
uig criteria. The sacks dra^Ti around the various groups of 



data flow diagram elements in Fig. 10 show the application 
of the task and pa:;kage sti-uct tiring and mtertask synchro- 
nization criteria described above. After several iterations 
these sacks were Iransformed into tlie simplified ADAHTS 
architectural diagram shoiAii m Fig, 1 L The letters in Hgs. 
10 and 1 i show the correspondence between the two system 
representations. 

After the architecture was specified, designed, and imple- 
mented, attention was turned to the second part of the 
project — development of applications to nm mthut the new 
architecture. Once again, stnictured analysis was used for 
specification of the software. However, we enhanced tiie 
design step by adding supplemental criteria to guide the 
designers in allocating application functionality to pre- 
viously designed architectural components. For example, 
within certain architectuie components places were left 
open to plug in application software that: 

• Processes a keystroke (see vk (virtual key) functions in 
Fig. 11) 

• Defines an appUcation-specific parameter (see the agents 
data structure in Fig. 11) 

» Adjusts an application parameter value when other parame- 
ters it depends on change (see the check routines function in 
Fig. 11). 

The supplemental criteria helped the application designers 
detennine where each aspect of the application functional- 
ity should reside witliin the architecture. The ADARTS 
methodology was thtLs used as a template for creating a 
more specific high-level design method. Detailed design for 
each component of the apphcation then proceeded in the 
nsual way. 

Package Design 

The degree to which the package structuring procedure of 
ADARTS was used during the project varied significantly. In 
some cases, the structuring criteria were applied rigorously. 
For example, iti the contiimous loop review application, 
wliich is an ultrasoimd apphcation that supports acquiring 
video images into memory and playing them back as contin- 
uous loops, the criteria were applied to a leveled data flow 
diagram, leading to a highly modular ADARTS design 
consisting of objects with cohesive operations, 

hi many cases^ ADARTS was used simply as a notation to 
show an object representation of a system's hmrtionalitj. 
Some ADARTS designs were derived from a complete and 
leveled SA and others were derived from a high-level or 
abbreviated SA. Although the package stnictining criteria 
were not explicitly used here, designers still applied ihe 
information hiding concepts recommended by ADARTS. For 
example, the Interpret Stinnilus component shown hi Fig. 11, . 
which encapsulates the user interface ftmctionahty of the 
system, is quite complex. The ADARTS design for this com- 
ponent, ^ilthough not derived from a complete SA, is very^ 
useful for showmg the interactions between the packages. 
The component mterface speciftcations for this component 
made it easier to understand the individual packages 
contained in the component. 

Similarly, while the criteria developed to guide enguieers in 
allocating specification fimctiondity to architecture compo- 
nents were not always used explicitly, they comnimiicated 
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to designers the choices that hatl Lo be considered when 
assigning tlie functionality of the application liemg designed 
to the appropriate components. 

Tools and Techniques 

We used a conunercially available CASE product to generate 
ttie ADAJ'iTS <jiagranis. Since the product was targeted for 



Ada iisens, we had lo deal with several drawbacks in using 
the tool because we were using the C language and a real- 
time operating system. For example, tlie product provided 
no dhect support Ibr the nu^ssage queue symbol [used to 
show loosely coupled commimication i between processes), 
so we cor^structetl the reqiuied sytiilitjl from primitive line 
stnietiires. In addition, there was no mtegrated ntechanisni 
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for creating component interface .^secificatioi^ and tiding 

ihem to ADAETS components. Also lacking was a traceabil- 
uy mechanisni for tracing sj^steni requirements from SA to 
ADAiriE to SD, 

Since the architeciure Sf>ftvvare is a key part of the imaging 
produci. we paid extra attention lo usiitg the developmeni 
proce^ to attain higln|ualjty software. We adopted a gen- 
eral software deveiopmeni framework for the project. The 
steps in our process and the deliverables are smimiarized in 
Table 1. 

Table I 
Development Process Using ADARTS 



Phase 

Requir e*nien l s G e rierat i on 

System Specification 
Architecture Desi^ 
Detailed Design 
Implementation 



Deliverable 

Soft ware Reqaii ei nent s 
Specincanon 

Structured Analysis 

ADAETS 

Structured Design 

Source Code 



Each step in litis process was usually ft allowed by an inspec- 
tion by the appropriate itKli\idual or group. 

Summary 

The followiitg is a list of the strengths and weaknesses we 
found by using this version of ADARTS in our environment. 

Strengths, Souu^ of Uk-^ coniributions ajid positive aspects of 
the AIM UTS technique include: 

• Continuity and task structure. ADARTS proxides a linkage 
between an SA inotlel and the detaiied design of imlivldual 
software nioihiley by [>artiuoning ihu sptn iliratinn ijito tlip 
optimal set of ronciuTeal tasks atul the af^t^rotaiate ctaiTian- 
nication mecl^miisms between tiiem. SA and HD alitne do nt>L 
aid in the flesign of the overall concuiTcnt task strticture. 

• Package structure. AfJARTSj through its package structur- 
ing tTiteria, provides a method for achieving a reasonable 
object structure for the lYuictionality represented by the SA 
model. SD alone, throuj^h its transfortn analysis and trans- 
action aniilysis lechnitiues.'^' is nrvi effective for biulding 
encapsulaied objects. P^JicapsalatJon is the predomin^mi 
object-oriented desigti concept applied to our software 
develo])mettt activities, and ADARTS supports this design 
aspect very well 

■ Msibility. ADARTS desigit deUvembles (^irchitecture diagrams 
and comptinen! ititerface specifications) make a software 
design ntore visible, promoting more eneclive design inspec- 
tions 'dt\(\ ntakinj^ design concepts clear to other engineers 
who have a need to uurleistand or n^aiJilaiii Ifu^ software. 

• Systematic approach. The stet^s used in AI).'\irrs pr(i\idc a 
systematic approach to systeni-level design, reducing the 
thrasiiitig that can occur when lV>lloA^inj| ttnstnictured or ad 
i^oc system design nu^lhods. 

• Intuitive. ADARTS is easy ro undcrstatid for n civ and expe- 
rienced software engineers attd intiutive to those familiar 
with real-time software design, 

• Transaction analysis is a design strategy based on a studv of the transactions the system must 
procEss, Trajisfofm analysis is a deaign straiEgy based on the study of the data flows in a 

system and the trarfsformations performed en that data, 



• Acceptance. ABAKTS was accepted by the engineers using 
it at ISV. aJihougli tJieir reasons I'aried widely. Each of the 
strengths stated above was cited by one or more engineers 
as the most valuable contribudon of ADARTS, 

Weaknesses. Jusi as we found many strengths in the 
^UjARTS lei hiyque, we also found sotne weaknesses in us- 
ing ADARTS in our environment. These weaknesses include: 

• Object orientation. ADARTS falls short in its support for 
several of the currently accepted object-oriented design 
characteristics. For example, there is no provision for 
dcRititig oi>ject classes or inheritance. 

• Tools, I^Ianipuiating the architectiu'e diagrams used in 
ADMITS (as well as the data flow diagrams and structure 
cl^taits used in SA and SD) with the currcmly available CASE 
tools is time^onsumiug and has beeit a frequent complaint 
from engineers using these methods. 

• Acia. We didn't have a need for the Ada-specific structures 
discussed in the ADARTS paper, and therefore we did not 
gain tiie hili benefit inherent in the ADARTS methodology. 

Conclusion 

We found ADARTS to be an extremely effecrtive teelmique 
for bridgitig the gap between a structured analysis specifica- 
tion and the structured flesign of the software iruxiules tliat 
make up a software system. By providing a path between 
the two techniques, it makes both fm' more valuable than 
they w^ould be otherwise. For structured anaiysls^ the con- 
tribution to the definition of concurrent tasks and conimtmi- 
cation mechanisms is mdispeitsable, but even if there is no 
concitrrettcy required, ADARTS helps in identifying an ob- 
ject stnicture before iipjjl.ving the next detailed design step. 
Even If ADAJITS is used un an SA specification tliat requires 
neither concurrency nor objects, it produces the trivial-case 
Irigh-Ievel design cousistitig of a single task in a single pack- 
age which can then be c onstnicted usiitg SD. Thus, there is 
no h'dnn in applying the technique to all designs. 
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The dedicated efforts of the members of the sn ft ware archi- 
tecture project team were* key to tiie sncrpssful ai)ph cation of 
ADAETS witliin ilPs Imagiivg Systems Di\ision (ISY): Stephen 
Ag^yejiong, Janice Bisson, Risa Bf>broff, Marc Davidson, 
Paula Ihut. BUI Ihute. Peter Kel ley. Mail in Moyi^ilian, and 
Kris Rovell-Rixx. We also tliai^k Joe Kobrenski and Paul 
Kelly for tlicu' contiibntions in promoting the use of ADARTS 
witliin tlie project dining its fomiative stages, and Bill KV>ppes 
and Aitliur Dickey for sup[>orting the group in its efforts to 
improve our development t^rocess diulng the- projec^t, FinaLly, 
we thank Dr. Cbtu-les Butler of (*olorado State University' for 
bis guidance in the proper use of structined methods at ISY. 
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